In March 2019, Microsoft released an update to Windows 7 and Windows 2008 R2 to support SHA256 only driver signing. This Microsoft update is required in order to run Sophos Endpoint. As of

  • Sophos Endpoint Core Agent 2.7.6 (Started release May 20th for Endpoints, June 4th for Servers)
  • Intercept X 2.0.17 (Started release May 11th for Endpoints, June 02nd for Servers) all files and drivers are signed with only SHA256 (Previously they were SHA1 and SHA256 signed).

This is a Microsoft driven change.

Note: This affects Windows 7 and Windows 2008 R2 operating systems. Operating system that are fully up to date with Windows Updates will not be impacted.

What to do