Microsoft will not allow you to install future security updates until your security software developer defines a specific registry key that certifies the application's compatibility with Windows.
As part of the security updates for the Meltdown and Specter CPU attacks, Microsoft required all security application vendors to verify compatibility with CPU fixes and then assign a registry key to their products that certifies compatibility. Without this key, the Microsoft security update simply would not be installed.
Microsoft clarified that this new rule will apply to all future security updates. This means that you are using incompatible third-party antivirus will not be protected from future Microsoft updates.
"Customers will not receive security updates from January 2018 (or any subsequent security updates) and will not be protected against security vulnerabilities unless the antivirus software vendor sets the following registry key," notes on its support page. Microsoft. (we attach the key below in .reg format, for those who need it)
While testing the fixes for both attacks, Microsoft found that some antiviruses were making "unsupported calls to Windows kernel memory." So many people have noticed BSOD errors after applying the update. To avoid this problem, the company announced the above regulation.
Security researcher Kevin Beaumont has compiled a list of antivirus products that are compatible with Microsoft CPU update and have correctly assigned the necessary registry key in Windows.
You can see the products that support its new requirement Microsoft from here.
However, conventional antivirus products appear to meet both requirements, and next-generation security products have confirmed compatibility.
If the security product you are using is not in the list, you can manually pass the key, which Microsoft says should be done with extreme caution.
So we will give the key and the reg file, for those who want to do it with a double click.
Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat" Value="cadca5fe-87d3-4b96-b7fb-a231484277cc" Type="REG_DWORD” Data="0x00000000”
iGuRu_QualityCompat.reg Right click, Save As