Retirement of SHA-1 signing on January 1, 2021

Technical Articles ID: KB93853
Last Modified: 2022-12-16 20:36:35 Etc/GMT

Environment

SuperDAT, V2 DAT EXE, V3 DAT EXE
Microsoft Windows operating systems
See the 2019 SHA-2 Code Signing Support requirement for Windows and WSUS Microsoft article for affected operating systems

Summary

From January 1, 2021, we will retire SHA-1 signing of all V2 and V3 DAT packages and continue with SHA-256 signing only.

We currently dual signs all V2 and V3 packages with a SHA-1 and a SHA-256 certificate that GlobalSign provides.

GlobalSign is discontinuing their SHA-1 time stamping service on December 31, 2020. So, on January 2, 2021, because there are no planned DATs on New Year’s Day, all DAT packages will be signed with only a SHA-256 certificate.

Related Information

To update virus definitions using the V2 SuperDAT (V2 DAT EXE) the operating systems must support SHA-256 signed content.
Windows operating systems that can't natively support SHA-256 must be updated with the applicable Microsoft update.
The V2 ePolicy Orchestrator package is unaffected by this change.
There is no impact for products using V3 DATs, as the supported operating systems can facilitate SHA-256 signed content.
CA/Browser (CAB) Forum guidelines on Code Signing now mandate that Certificate Authorities must stop issuance of SHA-1 Code Signing certificates and SHA-1 time stamping by January 1, 2021. For more information, see the Upcoming Changes to CodeSigning GlobalSign article.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Retirement of SHA-1 signing on January 1, 2021

Environment

Summary

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

Retirement of SHA-1 signing on January 1, 2021

Environment

Summary

Related Information

Affected Products

Languages:

Choose your region

Title

Title