Windows does not boot after installing AIP2018 update6 on Windows Server 2008R2

Summary

After installing ActiveImage Protector 2018 update6 on Windows Server 2008 R2, the system starts up into the recovery console and Windows does not boot.

Cause

KB4474419 is now required on Windows 2008R2 as the driver signature has shift to sha2.
However, on systems that do not have this patch applied, the driver signature will be judged to be incorrect and the recovery console will start.

Requirements for 2019 SHA-2 code signing support for Windows and WSUS
https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus

KB4474419
https://support.microsoft.com/en-us/help/4474419/sha-2-code-signing-support-update

Workaround

1) If start-up in Recovery Console occurs, restart.
2) Press F8 at boot time to display the [Advanced Boot Options].
3) Select [Disable Driver signature Enforcement] to start.
4) Install KB4474419 when the OS boots.
5) Reboot the OS.

Target Product

-ActiveImage Protector 2018 Update 6