Skip to main content
kwernecke
Staff
Staff
November 22, 2021

Technical Tip: Installing FortiEDR On Windows 7 and Windows Server 2008 R2 SP1 Requires KB Patch from MS KB2921916

  • November 22, 2021
  • 0 replies
  • 3477 views
Description This article describes installing FortiEDR on Windows 7 & Windows Server 2008 R2 SP1 non-patched devices
Scope  
Solution

Important Note.
The SHA1 code signing has expired in the beginning of January 2020 and it cannot be re-issued.

 

The new certificate is signed with SHA256, which may not be accepted by old Windows 7 and server 2008 that were not patched since 2015.

 

On such old and non-patched units the installer/upgrade will fail and the unit will stay running with older Collector version.

 

On Windows 7 one can overcome this problem by patching the unit with KB2921916.

 

On Windows Server 2008 R2 SP1 one can overcome this problem by patching the unit with KB2921916.

 

On Windows server 2008 R2 (no SP) there is no patch by Microsoft to overcome this issue.

 

More information available here:

https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2015/3033929?redirectedfrom=MSDN

 

Please open up a support case in order for TAC to share the hotfix.