Issue:
When looking at the Malware protection column on the Elements Endpoint Protection portal's Devices page, the status for one or more devices is shown as Broken ACS. Overall protection shows "Malware issue" status when the device's details are viewed.
Locally in the Elements Agent user interface, status is shown as "Your computer is at risk due to missing Windows patch".
Resolution:
Broken ACS refers to missing Azure Code Signing support on the device. The device's Windows installation must support Azure Code Signing for the product to function. You will need to install the required Windows update, which brings Azure Code Signing support: https://support.microsoft.com/en-gb/topic/kb5022661-windows-support-for-the-azure-code-signing-program-4b505a31-fa1e-4ea6-85dd-6630229e8ef4
After installing the required Windows update, restart the device and then the Elements Agent will be able able to install updates.
You can read more about the ACS support requirement from this WithSecure Community article: https://community.withsecure.com/en/kb/articles/29714-changes-in-support-on-microsoft-windows-minimum-patch-level
Article no: 000043997