Azure Log Analytics agent for Windows SHA-2 signing date has been extended

Azure Updates

Discussionpowered by zap.ms

Published

May 11, 2020

Timeline

  • May 2020
    General Availability

Product

Microsoft Defender for Cloud
Microsoft Sentinel
Automation
Azure Monitor
Log Analytics

Tag

Management
Operating System
Security

Category

Hybrid + multicloud
Security
Management and governance
DevOps

Description

The Azure Log Analytics agent for Windows will begin to use SHA-2 signing exclusively on Aug. 17, 2020. This date has been extended from May 18, 2020 to give customers more time to prepare.

The change will impact customers using the Log Analytics agent on a legacy OS as part of any Azure service (Azure Monitor, Azure Automation, Azure Update Management, Azure Change Tracking, Azure Security Center, Azure Sentinel, Windows Defender ATP).

This change requires action only if you’re running the agent on a legacy OS version (Windows 7, Windows Server 2008 R2, or Windows Server 2008). Customers running on a legacy OS version are required to apply the latest service updates and patches on their machines before Aug. 17, 2020, or their agents will stop sending data to their Log Analytics workspaces.

Learn more about the SHA-2 code signing support requirement for Windows.