After installing ActiveImage Protector 2018 update6 on Windows Server 2008 R2, the system starts up into the recovery console and Windows does not boot.
KB4474419 is now required on Windows 2008R2 as the driver signature has shift to sha2.
However, on systems that do not have this patch applied, the driver signature will be judged to be incorrect and the recovery console will start.
Requirements for 2019 SHA-2 code signing support for Windows and WSUS
1) If start-up in Recovery Console occurs, restart.
2) Press F8 at boot time to display the [Advanced Boot Options].
3) Select [Disable Driver signature Enforcement] to start.
4) Install KB4474419 when the OS boots.
5) Reboot the OS.
-ActiveImage Protector 2018 Update 6