CB PSC: Is a SHA256 signature supported for a 3.4 PSC sensor on Windows 7?

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

3.4 MSI installation on Windows 7 using SHA-256 signing fails.

Environment

• CB Defense Sensor
• CB ThreatHunter Sensor
• Microsoft Windows 7

Cause

The 3.4 sensor MSI is signed with a SHA256 signature but Windows 7 predates the SHA256 algorithm and support for SHA256 was provided as part of a Windows 7 patch

Resolution

1. Install the Microsoft patch mentioned in  KB3033929 found at 
   https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2015/3033929
2. Run the sensor installation again