redhot4400 1 Posted June 29, 2023 Share Posted June 29, 2023 Hello everybody, Does ESET Endpoint products must be running a version of Microsoft Windows that has been updated to support the Azure Code Signing (ACS) program, which replaced the deprecated cross-signing program. Windows support for the Azure Code Signing program @redhot4400 Link to comment Share on other sites More sharing options...
Administrators Marcos 5,097 Posted June 29, 2023 Administrators Share Posted June 29, 2023 Yes, a KB adding ACS support must be installed in order for new installations and program upgrades to work. Link to comment Share on other sites More sharing options...
redhot4400 1 Posted June 30, 2023 Author Share Posted June 30, 2023 Hello @Marcos Thanks for your reply. Is your answer for ESET Endpoint products also? @redhot4400 Link to comment Share on other sites More sharing options...
Administrators Marcos 5,097 Posted June 30, 2023 Administrators Share Posted June 30, 2023 Yes, it concerns any security product that has kernel modules and ekrn.exe. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,097 Posted July 19, 2023 Administrators Share Posted July 19, 2023 For more information please read https://support-eol.eset.com/en/trending_weol2023_10_2022.html. Link to comment Share on other sites More sharing options...
redhot4400 1 Posted July 19, 2023 Author Share Posted July 19, 2023 Hello @Marcos Thank you for the Url you shared. Will you please kindly confirm me when that was posted? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,097 Posted July 19, 2023 Administrators Share Posted July 19, 2023 The article was first published on June 7. We'll consider adding also the publication date information in the future. Link to comment Share on other sites More sharing options...
redhot4400 1 Posted July 20, 2023 Author Share Posted July 20, 2023 Hello @Marcos Microsoft published Windows support for the Azure Code Signing program probably at the end of 2022. Few other EPP companies release the bulletin February / March of 2023. That MS fact will impact all over the world who are using EPP. So why did ESET become so delay on it? Link to comment Share on other sites More sharing options...
Administrators Marcos 5,097 Posted July 20, 2023 Administrators Share Posted July 20, 2023 We do not publish such announcements with Microsoft. For instance, Windows 7 support ended in January 2020 so Microsoft must have announced it long before while our users hadn't received such notification until recently. We don't want to unnecessarily distract users by notifications, especially if many are aware of using an outdated and insecure OS. We start to notify users a couple of months before an event that may cause protection to stop working or that will otherwise negatively affect the program (in case of missing ACS support it's inability to update to a newer version). By the way, the Windows update adding ACS support should have been already installed automatically. Do you happen to know why it hasn't? What OS is it? Peter Randziak 1 Link to comment Share on other sites More sharing options...
santoso 7 Posted September 25, 2023 Share Posted September 25, 2023 hello, i want to ask about this topic we have windows 10 version 1903, when we want to install "KB5005611" it says The update is not applicable to your computer Download from this link https://www.catalog.update.microsoft.com/Search.aspx?q=KB5005611 This is the right patch we need for windows 10 1903 for Azure Code Signing issue? Thank for help, Regards, Link to comment Share on other sites More sharing options...
thae 9 Posted September 25, 2023 Share Posted September 25, 2023 2 hours ago, santoso said: hello, i want to ask about this topic we have windows 10 version 1903, when we want to install "KB5005611" it says The update is not applicable to your computer Download from this link https://www.catalog.update.microsoft.com/Search.aspx?q=KB5005611 This is the right patch we need for windows 10 1903 for Azure Code Signing issue? Thank for help, Regards, There's no KB for 1903, only for 2004 and upwards. You have to update your Windows 10. santoso 1 Link to comment Share on other sites More sharing options...
redhot4400 1 Posted September 25, 2023 Author Share Posted September 25, 2023 Hello @santoso Best way to update till now for windows OS. Because ACZ SU top on some previous update and ACS SU also eliminate by upper update. So it's too difficult to apply exact update. santoso 1 Link to comment Share on other sites More sharing options...
santoso 7 Posted September 26, 2023 Share Posted September 26, 2023 20 hours ago, thae said: There's no KB for 1903, only for 2004 and upwards. You have to update your Windows 10. 19 hours ago, redhot4400 said: Hello @santoso Best way to update till now for windows OS. Because ACZ SU top on some previous update and ACS SU also eliminate by upper update. So it's too difficult to apply exact update. Thank you guys Best regards, Link to comment Share on other sites More sharing options...
offbyone 10 Posted October 2, 2023 Share Posted October 2, 2023 Quote There's no KB for 1903, only for 2004 and upwards. You have to update your Windows 10. What about Windows 10 LTSC? Windows 10 LTSC 2019 is supported till 2029 by Microsoft. It should be supported by ESET also. Link to comment Share on other sites More sharing options...
itman 1,674 Posted October 2, 2023 Share Posted October 2, 2023 (edited) 18 minutes ago, offbyone said: What about Windows 10 LTSC? Obviously, you will be able to apply the applicable KB for the referenced OS version. The problem is there is no reference to Win 10 1903 in https://support.microsoft.com/en-au/topic/kb5022661-windows-support-for-the-azure-code-signing-program-4b505a31-fa1e-4ea6-85dd-6630229e8ef4 . As such, it can be assumed it can't be updated via KB method. Edited October 2, 2023 by itman offbyone 1 Link to comment Share on other sites More sharing options...
offbyone 10 Posted October 2, 2023 Share Posted October 2, 2023 @itman THX for fast reply. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,097 Posted October 2, 2023 Administrators Share Posted October 2, 2023 26 minutes ago, offbyone said: It should be supported by ESET also. It is actually Microsoft that sunset support for cross-signed root certificates: https://knowledge.digicert.com/alerts/Kernel-Mode.html. offbyone 1 Link to comment Share on other sites More sharing options...
itman 1,674 Posted October 2, 2023 Share Posted October 2, 2023 I will also add that people "better get cracking" on applying these KB updates. Based on this recent posting: https://forum.eset.com/topic/38212-install-failing-on-2008r2-servers-with-acs-support/ , updating is far from smooth. offbyone 1 Link to comment Share on other sites More sharing options...
offbyone 10 Posted October 2, 2023 Share Posted October 2, 2023 12 minutes ago, itman said: I will also add that people "better get cracking" on applying these KB updates. Based on this recent posting: https://forum.eset.com/topic/38212-install-failing-on-2008r2-servers-with-acs-support/ , updating is far from smooth. THX for pointing out. We have few customers with 2008 R2 servers in offline environment which are target to update ESET on. I will setup a test environment before. Link to comment Share on other sites More sharing options...
itman 1,674 Posted October 2, 2023 Share Posted October 2, 2023 (edited) 1 hour ago, offbyone said: We have few customers with 2008 R2 servers in offline environment which are target to update ESET on. I will setup a test environment before. Bad ending for out friend trying to update his Win 2008 R2 servers. He didn't realize he had to be on ESU support for this KB fix to work. More the reason for everyone to get on this pronto; lest you have to purchase and install new Win OS licenses. Edited October 2, 2023 by itman Link to comment Share on other sites More sharing options...
offbyone 10 Posted October 3, 2023 Share Posted October 3, 2023 (edited) Quote Bad ending for out friend trying to update his Win 2008 R2 servers. He didn't realize he had to be on ESU support for this KB fix to work. Just set up a test environment and made some tests here. I think we will install ESET Server Security 9.0.12017 on Windows 2008 R2. This seems to work flawlessly also without the KB. The most up to date version currently is 9.0.12018 which fails it KB is not present. Edited October 3, 2023 by offbyone Link to comment Share on other sites More sharing options...
Recommended Posts