[German]Trend Micro released a document in late May 2023 that addresses the minimum Windows requirements for Azure Code Signing (ACS) for Worry-Free Business Security (on-premises) and Worry-Free Business Security Services (WFBS-SVC).
Advertising
Microsoft requires security vendors to sign binaries with ACS (Azure Code Signing). Trend Micro will migrate its Worry-Free Business Security (on-premises) and Worry-Free Business Security Services (WFBS-SVC) products to this new certificate accordingly. However, this requires meeting some minimum OS build and patch level requirements.
After February 18, 2023, issues (the agent program and services may not function properly) may occur if Windows does not have the required patch level. In addition, a reporting issue may occur between Windows Security Center (WSC) and Trend Micro Security Agent.
This may cause the agent to run in conjunction with Windows Defender. This then possibly manifests itself in a slow logon, or cause applications to lock up, or cause the computer to become unresponsive.
German blog reader Tom B. emailed me in late May 2023 to point out this issue and the Trend Micro support post Worry-Free Business Security (On-Premises) and Worry-Free Business Security Services (WFBS-SVC) minimal Windows requirements for ACS (Azure Code Signing) (thanks for that). In the support article there are further hints and the statement that Trend Micro wants to make sure that the minimal requirements for ACS are ensured by TM hotfixes.
This change by Microsoft also affects WithSecure's anti-virus products.
Changes in support on Microsoft Windows – Minimum patch level
We discovered this issue when the WithSecure agent reported a malfunction because it had failed to install all the anti-virus components on a newly upgraded server. Turns out that the server hadn't been fully patched with the appropriate Microsoft updates. Once the latest cumulative update from Microsoft was installed, the WithSecure agent was able to install all of the necessary components.
Had a similar comment within my German blog post about Sophos – see Sophos Support article