After installing AIP2018 Update 6 on Windows Server 2008R2, Windows fails to boot

Summary

Following the installation of ActiveImage Protector 2018 Update 6 on Windows Server 2008 R2, the system boots into the recovery console, and Windows fails to start.

Cause

KB4474419 is now essential for Windows 2008R2 due to a shift in the driver signature to SHA-2. If this patch is not applied on systems, the driver signature may be deemed incorrect, leading to the initiation of the recovery console.

Requirements for 2019 SHA-2 code signing support for Windows and WSUS
https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus

KB4474419
https://support.microsoft.com/en-us/help/4474419/sha-2-code-signing-support-update

Workaround

1) If start-up in Recovery Console occurs, restart.
2) Press F8 at boot time to display the [Advanced Boot Options].
3) Select [Disable Driver signature Enforcement] to start.
4) Install KB4474419 when the OS boots.
5) Reboot the OS.

Target Product

-ActiveImage Protector 2018 Update 6

(13451130385433)