Windows VMTools SHA 1 signature deprecation notice

Products

• VMware vSphere ESXi

Issue/Introduction

From VMTools 11.2.0 release, instead of SHA 1 signatures, all the Windows drivers will have SHA 2 signatures.

Cause:

Microsoft has changed Windows driver signing to use SHA 2 algorithm exclusively starting December 3, 2019, legacy Windows systems without SHA 2 code signing support will fail driver signature verification, for more information see Microsoft UPDATE: Hardware Partner Center – SHA 1 signing deprecation notice.

Environment

VMware Tools 11.x

Resolution

For Windows 7 and Windows Server 2008 R2 without SHA 2 code signing support will fail driver signature verification, see VMware Tools upgrade fails on Windows without SHA-2 code signing support.