Ivanti Neurons Platform - Installing Microsoft KB5058499 on Windows 11 24H2 breaks WinVerifyTrust signature verification (1594794)
Incident
Report for Ivanti Cloud
Resolved
This incident has been resolved.
Monitoring
A fix has been implemented and we are monitoring the results.
Update
Installing Windows 11 24H2 Preview Patch KB5058499 introduces a breaking change in the digital signature Win32 API call WinVerifyTrust, which prevents Ivanti agents, including agents for Security Controls, Ivanti Neurons, and Patch SDK, from functioning.
Workaround:
Uninstalling KB5058499 and restarting the system will enable existing agents to function again and new agents to be installed.
Additionally, a new Ivanti Neurons agent will be pushed later today to mitigate this issue permanently.
Workaround:
Uninstalling KB5058499 and restarting the system will enable existing agents to function again and new agents to be installed.
Additionally, a new Ivanti Neurons agent will be pushed later today to mitigate this issue permanently.
Update
We are continuing to investigate this issue.
Investigating
Installing Windows 11 24H2 preview Patch KB5058499 has a breaking change in the digital Signature Win32 API call WinVerifyTrust which results in Patch SDK, Security Controls, and Ivanti Neurons for Patch Management agents from functioning.
Workaround: Uninstalling KB5058499 and restarting the system will enable existing agents to function again and new agents to be installed.
Workaround: Uninstalling KB5058499 and restarting the system will enable existing agents to function again and new agents to be installed.
This incident affected: Ivanti Neurons Platform (Ivanti Neurons Platform (MLU), Ivanti Neurons Platform (NVU), Ivanti Neurons Platform (UKU), Ivanti Neurons Platform (FRU), Ivanti Neurons Platform (TTU), Ivanti Neurons Platform (TKU)).