Technical Tip: Installing FortiEDR On Windows 7 and Windows Server 2008 R2 SP1 Requires KB Patch from MS KB2921916

[kwernecke]

Description	This article describes installing FortiEDR on Windows 7 & Windows Server 2008 R2 SP1 non-patched devices
Scope
Solution	Important Note. The SHA1 code signing has expired in the beginning of January 2020 and it cannot be re-issued. The new certificate is signed with SHA256, which may not be accepted by old Windows 7 and server 2008 that were not patched since 2015. On such old and non-patched units the installer/upgrade will fail and the unit will stay running with older Collector version. On Windows 7 one can overcome this problem by patching the unit with KB2921916. On Windows Server 2008 R2 SP1 one can overcome this problem by patching the unit with KB2921916. On Windows server 2008 R2 (no SP) there is no patch by Microsoft to overcome this issue. More information available here: https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2015/3033929?redirectedfrom=MSD... Please open up a support case in order for TAC to share the hotfix.