Installing Kaspersky solutions for business on Windows versions that do not support SHA-2
This article concerns:
- Kaspersky Endpoint Security 3.11
- Kaspersky Industrial CyberSecurity for Nodes 3.0.
Microsoft stops the support of root certificates that allow signing the code of the drivers that works on the operating system kernel level. Now drivers are signed with the WHQL (Windows Hardware Quality Lab) signaturewhich is based on the SHA-2 (SHA-256) algorithm. To verify the signature in the operating system, SHA-2 must be supported.
Before installing a Kaspersky solution for business on a computer with an operating system listed below, make sure updates thta add the support of SHA-2 are installed on this computer. If SHA-2 is not supported, installation will be interrupted.
If the installation is performed:
- Through the Installation Wizard. You will see a notification that SHA-2 is not supported and then you will have options to proceed with the installation or stop it.
- Through the command line or remotely. You can skip the check by adding the key SKIP_SHA2_KB=1. Skip the check only if you are sure that the operating system on the protected device supports SHA-2.
If the operating system on a protected device does not support SHA-2, Kaspersky application modules can be installed incorrectly or work incorrectly, also this might cause the issues with the operating system functioning.
Below you can find the list of supported versions of Windows, which require installation of updates.
| Operating system | Upgrade |
|---|---|
| Windows 7 Professional/Enterprise/Ultimate (32/64 bit) | KB3033929 or KB4474419 |
| Windows Embedded Standard 7 SP1 (32/64 bit) | KB3033929 or KB4474419 |
| Windows Embedded POSReady 7 SP1 (32/64 bit) | KB3033929 or KB4474419 |
| Windows Embedded Standard/Enterprise 7 SP1 (32/64 bit) | KB3033929 or KB4474419 |
| Windows Vista SP2 (32/64 bit) | KB4039648 or KB4474419 |
| Windows Server 2008 Standard/Enterprise/Datacenter SP2 or later | KB4039648 or KB4474419 |
| Windows Server 2008 Core Standard/Enterprise/Datacenter SP2 or later (32/64 bit) | KB4039648 or KB4474419 |
| Windows 2008 Server Microsoft Remote Desktop Services SP2 | KB4039648 or KB4474419 |
| Microsoft Small Business Server 2008 SP2 Standard/Premium and later (64 bit) | KB4039648 or KB4474419 |
| Windows Server 2008 R2 Foundation/Core/Standard/Enterprise/Datacenter SP1 and later
(64 bit) | KB3033929 or KB4474419 |
| Windows Hyper-V Server 2008 R2 SP1 or later (64 bit) | KB3033929 or KB4474419 |
| Windows 2008 Server R2 Microsoft Remote Desktop Services | KB3033929 or KB4474419 |
| Microsoft Small Business Server 2011 Essentials/Standard SP1 or later (64 bit) | KB3033929 or KB4474419 |
| Microsoft Windows MultiPoint Server 2011 (64 bit) | KB3033929 or KB4474419 |
The table does not include operating system updates with the support of SHA-2 released later than the listed versions of Kaspersky solutions for business.