SHA-1 Signing Certificate Expiration and Deprecation on Dell Data Security Products

As of January 2020, the secure hash algorithm 1 (SHA-1) code-signing certificates that Dell Data Security products use is no longer valid. With the deprecation of SHA-1 globally, new SHA-1 certificates will not be issued, which may impact older operating systems.

Affected Products:

• Dell Encryption Enterprise
• Dell Data Protection Enterprise Edition
• Dell Encryption Personal
• Dell Data Protection Personal Edition
• Dell Encryption External Media
• Dell Data Protection External Media Edition
• Dell Endpoint Security Suite Enterprise
• Dell Endpoint Security Suite Pro
• Dell Data Guardian
• Dell Security Management Server
• Dell Data Protection Enterprise Edition Server
• Dell BitLocker Manager
• Dell Data Protection BitLocker Manager
• Dell Encryption Self-Encrypting Drive Manager
• Dell Data Protection Self-Encrypting Drive Manager
• Dell Data Protection Server Edition
• Dell Full Disk Encryption
• Dell Threat Defense
• Absolute
• CrowdStrike Falcon Sensor
• Carbonite Endpoint
• VMware Carbon Black Endpoint

Affected Operating Systems:

• Windows 7
• Windows Server 2008 R2 and earlier

As of January 2020, SHA-1 signing certificates are no longer valid and cannot be renewed. Devices running Windows 7, Windows Server 2008 R2, or Windows Server 2008 SP2 require Microsoft updates:

• SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: September 23, 2019
• Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019

Applications and installation packages that are signed with SHA-1 certificates still function. However, an error is displayed on the endpoint during installation or execution of the application without these updates installed.