Ivanti Neurons Platform - Installing Microsoft KB5058499 on Windows 11 24H2 breaks WinVerifyTrust signature verification (1594794)

This incident has been resolved.

A fix has been implemented and we are monitoring the results.

Installing Windows 11 24H2 Preview Patch KB5058499 introduces a breaking change in the digital signature Win32 API call WinVerifyTrust, which prevents Ivanti agents, including agents for Security Controls, Ivanti Neurons, and Patch SDK, from functioning.

Workaround:

Uninstalling KB5058499 and restarting the system will enable existing agents to function again and new agents to be installed.

Additionally, a new Ivanti Neurons agent will be pushed later today to mitigate this issue permanently.

We are continuing to investigate this issue.

Installing Windows 11 24H2 preview Patch KB5058499 has a breaking change in the digital Signature Win32 API call WinVerifyTrust which results in Patch SDK, Security Controls, and Ivanti Neurons for Patch Management agents from functioning.

Workaround: Uninstalling KB5058499 and restarting the system will enable existing agents to function again and new agents to be installed.