Microsoft has blocked updates on Windows 7/Server 2008 with incompatible anti-virus software
Microsoft officially issued a warning requiring Windows 7 and Windows Server 2008 users to enable SHA-2 support in order to receive Windows updates every month. At this stage, Windows updates use double signatures (SHA-1 and SHA-2) to prove their authenticity, but Microsoft plans to abandon SHA-1 and then only use the more secure SHA-2.
The August Patch Tuesday 2019 update rollup for Windows 7 is issued only through SHA-2, and those devices that cannot handle the SHA-2 code signature support software will be blocked from updating. Today Microsoft has confirmed that it will prevent PCs that install Symantec Antivirus and Norton Antivirus anti-virus products from being upgraded because they cannot process SHA-2 certificates. Microsoft said it has temporarily blocked devices with incompatible versions of Symantec software.
Microsoft recommends that Windows 7 users manually install newer updates before the antivirus vendors solve this problem. If you force an update, antivirus programs may block or remove Windows updates during the installation. This may corrupt the installation of Windows update or the system may not boot.
Via: ZDNet
