The February 2020 EAP update may break Windows 7 machines that are missing certain Microsoft patches. To mitigate this make sure these patches are installed before upgrading to the current release:
- Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1
- SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008
Windows 7 machines that do not meet these prerequisites will show errors in the SED install and uninstall logs, as the system can't reliably verify the digital signatures for certain files. As a result, the installation will rollback, leaving the system in the previous state, i.e. with a previous version of the endpoint, or without Sophos endpoint if this was the first installation.