In March 2019, Microsoft released an update to Windows 7 and Windows 2008 R2 to support SHA256 only driver signing. This Microsoft update is required in order to run Sophos Endpoint. As of
- Sophos Endpoint Core Agent 2.7.6 (Started release May 20th for Endpoints, June 4th for Servers)
- Intercept X 2.0.17 (Started release May 11th for Endpoints, June 02nd for Servers) all files and drivers are signed with only SHA256 (Previously they were SHA1 and SHA256 signed).
This is a Microsoft driven change.
Note: This affects Windows 7 and Windows 2008 R2 operating systems. Operating system that are fully up to date with Windows Updates will not be impacted.
What to do