Windows 7 and other legacy platforms use SHA-1 to compare hash values of the code. Microsoft will phase in the SHA-2 support first by flipping to dual code signing as of August 13, 2019. Windows 10 update signatures will change from dual signed (SHA-1/SHA-2) to SHA-3 only. Windows 7 will need to install the following updates to continue to be able to install security updates. These updates will allow WSUS 3.0 sp2 to deploy Windows 10 feature updates.”]

