WebRoot - Product Notification
Posted by Carlos R on 01 November 2016 02:32 PM
Re: Deprecation of SHA-1, important notice for users of Windows Server® 2003 and Windows XP® Operating Systems
If you are operating Webroot SecureAnywhere® products on a device that uses either the Microsoft Windows XP or Windows Server 2003 operating systems, we encourage you to update your operating system in order to ensure that Webroot SecureAnywhere products continue to offer you the best level of protection.
Windows Server 2003 and Windows XP operating systems are not configured to use SHA-2 256 or higher encryption without corrective action. Microsoft has published a KB article here explaining the issue and resolution paths.
In addition, in October 2015, Microsoft announced that Windows will stop accepting SHA-1 end-entity certificates beginning in January 2017.
Therefore, beginning on November 28, 2016, Webroot will complete its adoption of SHA-2 in accordance with best practice for security service vendors. SHA-2 is considered the most secure of hashing algorithms to date and will provide additional protection and confidence to our customers.
If you are operating Windows Server 2003 and Windows XP operating systems you should read the Microsoft KB Article and take the appropriate corrective action where possible.
Devices and servers operating Windows Server 2003 and Windows XP operating systems that are not updated or have not taken corrective action (e.g., Server hot fix or SP3 installed) will not have the full benefit of Webroot SecureAnywhere protection.
Microsoft, Windows XP, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.
This message was sent by Webroot Inc.