Microsoft will not allow you to install future security updates until your security software developer defines a specific registry key that certifies the application's compatibility with Windows.
As part of security updates for CPU attacks Meltdown and Specter, Microsoft required all security application vendors to confirm compatibility with CPU fixes and then set a registry key in their products that certifies compatibility. Without this key, the Microsoft security update will simply not install.
Microsoft clarified that this new rule will apply to all future security updates. This means that you are using incompatible third-party antivirus will not be protected from future Microsoft updates.
"Customers will not receive security updates from January 2018 (or any subsequent security updates) and will not be protected against security vulnerabilities unless the antivirus software vendor sets the following registry key," notes on its support page. Microsoft. (we attach the key below in .reg format, for those who need it)
Κατά τη διάρκεια της δοκιμής των επιδιορθώσεων για τις δύο επιθέσεις, η Microsoft ανακάλυψε ότι ορισμένα antivirus πραγματοποιούσαν “μη υποστηριζόμενες calls στη μνήμη του πυρήνα των Windows.” Έτσι πολλοί ήταν αυτοί που παρατήρησαν σφάλματα BSOD μετά την εφαρμογή της ενημερωμένης έκδοσης. Για να αποφευχθεί το συγκεκριμένο πρόβλημα, η εταιρεία ανακοίνωσε το παραπάνω κανονισμό.
Security researcher Kevin Beaumont compiled a list of products protections from viruses that are compatible with the Microsoft CPU update and have correctly set the necessary registry key in Windows.
You can see the products that support its new requirement Microsoft from here.
However, conventional antivirus products appear to meet both requirements, and next-generation security products have confirmed compatibility.
If the security product being used is not listed you can pass the key manually, which Microsoft states that it should be done with extreme caution.
So we will give the key and the reg file, for those who want to do it with a double click.
Key="HKEY_LOCAL_MACHINE" Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat" Value="cadca5fe-87d3-4b96-b7fb-a231484277cc" Type="REG_DWORD” Data="0x00000000”
iGuRu_QualityCompat.reg Right click, Save As
