As we have previously announced, due to infrastructure changes needed as part of our separation from F-Secure, the use of F-Secure branded clients is deprecated.
The clients WILL stop working at the end of 2024, and will provide no protection at all.
Customers using these deprecated clients MUST upgrade them to WithSecure branded versions before this date to ensure continued protection.
IMPORTANT NOTE: There is no need to purchase any new products. Your existing subscription keys continue to work for WithSecure-branded clients!
Possible reasons why the clients have not been updated automatically
Unsupported operating system
You may be using an operating system that is no longer supported by WithSecure Elements. Please note that the following versions are supported:
Microsoft Windows: Windows 10 and Windows 11
Microsoft Windows Server: Windows Server 2016, Windows Server 2019, Windows Server 2022
macOS: macOS 14 "Sonoma", macOS 13 "Ventura", macOS 12 "Monterey"
iOS: iOS 15 or later
Android: Android 11 and later
For Microsoft Windows, please note that Microsoft have changed the certificate they require security software vendors to use for signing software. The new certificate was added to Windows via software updates 3 years ago so this only affects computers that are at an older patch level. If a device does not support the ACS certificate it will show a critical protection status, and the EPP dashboard issue list contains an entry linking to affected devices. You can find out more details about this in our dedicated article.
Customer used our functionality to delay when updates happen
WithSecure Elements has functionality which will allow some client updates to be deferred. This is not intended to be used to delay the updates indefinitely. The easiest way to verify this is:
Go to the device list
Set a filter for ”status updated” -> within the last 7 days
Set a filter for “client version” -> not equals 24.4 or 24.5
Save the view from the view menu with a name such as “unsupported clients”
You can navigate to view profile settings by clicking on the assigned profile, then check the “automated tasks” section to verify if there is a task delaying updates. If there is, change the schedule to match your next maintenance window
Customer has some clients that requested a reboot after first installation and the reboot was never done
If the client requested a reboot after initial install but it was not done, it is possible that the client is not checking for updates. Using the view created above, open device details, navigate to the “Elements Agent update history” section and expand it. Check the status next to “Oneclient PSB” if it is requesting a reboot.
Disk space is really low
Elements clients will check for available disk space before trying to update. If your device has less space than needed for the update, the update is not applied. You can identify devices that have insufficient disk space from the EPP dashboards issue-list. Clear some space on the disk by deleting old content or moving it to another drive, and reboot the device. When the client starts again it will check for space, and if there is enough then the update will proceed.
Firewall prevents connection to an important network endpoint
WithSecure Elements Clients require access to some very important servers that we host. If connections are not possible, in some cases no update is detected, and this will keep the device at an older version. To identify devices that might have problems with connectivity navigate to the device list, click on the 3-bar icon next to device search, filter available columns for “connectivity” and select the fields “connectivity status” and “connections failing always”. This will add these new columns to the device list. If you filter the list to only show devices with “disconnected” connectivity status it will make it easy to review which domains they have issues connecting to and verify your firewall or proxy configurations to allow them. Please check this community article for a list of required connections.