BigFix-BES-Server-9.5.2.56.exe has corrupt signature according to IE security scan

1

Related: BigFix 9.5 Patch 2 is now available

Problem with the download at this location:

BigFix_Server_Download_Corrupt.PNG969Ă—59 4.16 KB

This happens in IE on Win10 as well as Windows Server.

1 Like
2

This is because the digital signature is currently leveraging a SHA1 digest ( http://social.technet.microsoft.com/wiki/contents/articles/32288.windows-enforcement-of-authenticode-code-signing-and-timestamping.aspx ). I’ll follow up on this, thanks!

1 Like
3

I just checked, and the SHA256 of the files themselves match the SHA256 of the download in the fixlet content.

4

We are aware of this requirement on the new Windows but it is not supposed to be being enforced until next year so Microsoft is not following its own timeline if that kind of warning is being shown. The SHA1 signing is valid however.

1 Like
5

Is the rule similar to SSL where the signature must only be valid until Dec 31st 2016?

6

I just ran the console installer download through Google Chrome, and SmartScreenFilter on Win10 didn’t like it and made me choose “Run Anyway” in order to proceed which is likely due to the signature issue as well.