Thirtyseven4 Announces SHA-1 Depreciation For Its Products
What is SHA-1 and SHA-2, and deprecation of SHA-1?
SHA-1 & SHA-2 are algorithms a certificate uses to sign binaries, and Thirtyseven4 also signs its binaries in the products. Thirtyseven4 has been using dual (SHA-1 & SHA-2) code-signing for its products.
According to an announcement, Microsoft will no longer allow certificate providers to issue SHA-1 supported certificates. The SHA-1 hashing algorithm used for code-signing of Thirtyseven4 products will expire on June 4, 2021, and we will use new credentials that only support the SHA-2 algorithm.
What will be the change in Thirtyseven4 products?
All new software packages, hotfixes, or security patches of Thirtyseven4 products created after June 4 2021 will use only SHA-2 Certificate for code-signing.
Please note, these changes do not affect any user experience and if you regularly install Windows updates, you do not have any action item.
What do I need to do?
Please find the action items below that are required on specific operating systems:
1. Windows 7, Windows Server 2008 & Windows Server 2008 R2
Apply MS Patches KB4474419 and KB4490628 if not already installed.
How to check if the required MS Patch is already installed or not?
Open Control Panel
Go to Windows Update
From the Windows Update page, click on ‘View Update History.
2. Windows 8 & above
No action is required.
3. Windows Server 2012 & above
No action is required.
4. Windows XP & Windows Server 2003
No action is required.
5. Windows Vista
– The latest Thirtyseven4 products and feature updates (fixes and enhancements) code-signed with SHA-2 will not be supported.
– Users will continue to receive only virus definitions.
– We recommend customers having Windows Vista upgrade to the latest operating systems.
Recommendation
We recommend using the latest version of operating systems to avoid the risk of exploits targeting vulnerabilities of the operating system. Windows operating systems that Microsoft no longer supports can be potentially vulnerable as Security patches/updates are not released for this operating system by Microsoft.
Reference
Availability of SHA-2 Code Signing Support for Windows 7 and Windows Server 2008 R2
Evaluation licenses of Thirtyseven4 Antivirus are available at: https://www.thirtyseven4.com/free-trial/. For more information contact Thirtyseven4 at 877-374-7581.
About Thirtyseven4:
Born out of a desire to better connect antivirus protection solutions with premium customer support and service, Thirtyseven4, LLC seeks to protect schools, businesses, governmental agencies and home‐users with the best antivirus products available. Thirtyseven4 is an American company built on honesty, trust and value for the customer. http://www.thirtyseven4.com.
Thirtyseven4, LLC is dedicated to serving customers with a full palette of security solutions including AntiVirus, AntiMalware, Anti-Ransomware and Zero-Day Threat Protection.
