We are committed to supporting many of our customers’ older operating systems. There are many scenarios, particularly in an OT, industrial, or medical environment, where updating to the latest Windows version is impossible or prohibitively expensive. To this end, alongside our SHA-2 signature, until Reflect v7.3, we have included a SHA-1 counter signature.
Due to the withdrawal of all SHA-1 timestamp services, we can no longer add a SHA-1 counter signature. This has two consequences for operating systems that haven’t been updated to include SHA-2 support.
You will not be able to verify our binaries' provenance or integrity. When launching Reflect, the publisher will be shown as “Unknown” in the Windows Vista and later UAC prompt. A user-mode SHA-2 update is available for all Reflect-supported platforms.
Where driver signature checks are enforced, drivers will not load without kernel SHA-2 support. Patches and updates for kernel SHA-2 support are only available for Windows 7 / Server 2008 R2.
Core Reflect features can only be implemented in kernel mode, and therefore, we are forced to block Reflect installs and updates in some instances, as detailed below.
| Windows Operating System | Status |
| Windows 8, Windows 10, Windows 11, Server 2016, Server 2019, Server 2022, Server 2025 | SHA-2 is supported by the operating system by default. As a result, these operating systems are not impacted by the SHA-1 code signing deprecation. |
| Windows XP, Server 2003, Windows Vista 32-bit, Windows 7 32-bit | These operating systems do not support SHA-2 by default; however, due to a lack of driver signature checks, Macrium Reflect will continue to work on these platforms. You will, however, receive an unknown publisher warning in the UAC prompt for Windows Vista and Windows 7. |
| Windows 7 64-bit, Server 2008 R2 | Macrium Reflect LTSC is available and supports these operating systems if the operating system has been patched to include SHA-2 driver signature support. |
| Windows Vista 64-bit, Server 2008 | Macrium Reflect LTSC is not available for these operating systems, with Macrium Reflect 7.3 being the last available version of Macrium Reflect. This is due to a combination of enforced kernel driver signature checking without an available update to support SHA-2 code signing. |