SHA-1 is a legacy cryptographic hash that many in the security community believe is no longer secure. Microsoft will eventually deprecate the use of the SHA-1 hashing algorithm for code signing certificates. McAfee Enterprise employs code signing certificates that use the Secure Hash Algorithm (SHA) computed with a 256-bit hash value to digitally sign binaries. These certificates are SHA-256 code signing certificates and SHA-256 is a member of the SHA-2 family. The SHA-2 family consists of six hash functions with digests (hash values) that are 224, 256, 384, or 512 bits: SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224, SHA-512/256. Where product documentation references SHA-2 signed certificates or code signing certificates, it means the use of SHA-256 code signing certificates.

McAfee Enterprise products are dual-signed with SHA-1 and SHA-256 code signing certificates. Dual signatures ensure backward compatibility with older operating system versions that do not support SHA-2.

This article indicates which versions of the corresponding McAfee Enterprise products are dual-signed with the SHA-1 and SHA-256 code signing certificates.

Recent updates to this article

Date	Update
July 28, 2021	Rebranded for McAfee Enterprise.
March 12, 2021	Updated with latest product categories.
September 30, 2020	Added Endpoint Security Adaptive Threat Protection category.
April 24, 2020	Updated article links.
September 26, 2019	Updated product versions.

McAfee Enterprise product	Supported platforms article	Initial product with binaries dual-signed with SHA-1 and SHA-256 certificates
Application and Change Control	KB87944	8.0
Content Security Reporter	KB83557	2.2.0
Database Security	KB73919	4.6.0
Data Exchange Layer	KB90421	3.0.0
Data Loss Prevention - Monitor	KB87112	11.0.000
Data Loss Prevention - Prevent	KB87112	10.0.100
Drive Encryption	KB79422	7.2.0
Endpoint Security for Windows	KB82761	10.5
ePolicy Orchestrator (ePO)	KB51569	5.9
File and Removable Media Protection	KB81149	5.0.3, 6.0.0
Host Intrusion Prevention	KB70778	8.0 Update 9
Management for Optimized Virtual Environments (MOVE) Multi-platform	KB74865	4.5
McAfee Active Response Client Module	KB84473	2.0
McAfee Agent	KB51573	5.0.5
McAfee Client Proxy	KB74182	2.2
Management of Native Encryption	KB79375	4.1.1, 5.0.0
Network Security Platform, has three components: - Network Security IPS Sensor - Network Security Manager - Network Threat Behavior Analysis	See product documentation.	8.1 MR6
Policy Auditor	KB72961	6.2.2 Hotfix 6.2.0 Hotfix
Rogue System Detection	KB82323	5.0.5
SiteAdvisor Enterprise	KB51244	3.5
Threat Intelligence Exchange Module for VirusScan Enterprise	KB83368	1.0.2
VirusScan Enterprise	KB51111	8.8 Patch 8
Web Gateway	KB84154	7.4.2, 7.7.0