Trying to deal with email from Azure saying to upgrade to SHA-2 for log analytics

David Kuehner 1

I have been receiving emails from Microsoft Azure <azure-noreply@microsoft.com> about my Azure server saying that I am using Log Analytics and that I need to "Update your OS to continue using the Log Analytics agent for Windows". However, there are no instructions about what I need to do about this. There is a link to "update your OS", but that doesn't lead to anything that gives instructions for my OS.

Does anyone know anything about this? I'm nervous since there seems to be a deadline of Nov 2nd to do something, but I have no clue what that something is that I need to do.

KranthiPakala-MSFT 46,512 Reputation points Microsoft Employee

2020-08-14T17:20:49.45+00:00

Hi @David Kuehner ,

Welcome to Microsoft Q&A and thanks for reaching out. At this time it doesn't look like the query is related to Azure Analysis Services tag so renamed tag to Azure-monitor for high visibility and immediate assistance.

Thanks
bharathn-msft 5,096 Reputation points Microsoft Employee

2020-08-15T05:56:53.59+00:00

@David Kuehner Thank you for reaching out, we will review this with our internal team and circle back.
bharathn-msft 5,096 Reputation points Microsoft Employee

2020-08-17T03:07:42.9+00:00

@David Kuehner Thank you for reaching out. Could please help confirm if "update your OS" link in the notification is taking you to this documentation ? As per current documentation the change does not require any customer action unless you are running the agent on a legacy OS version (Windows 7, Windows Server 2008 R2 and Windows Server 2008). Customers running on a legacy OS version are required to take the following actions on their machines before November 2, 2020 or their agents will stop sending data to their Log Analytics workspaces.

Please see if your OS falls into above category, if not can you please share your OS details so that we can further review. Thank you
David Kuehner 1 Reputation point

2020-08-17T18:56:20.897+00:00

First, I'll confirm that the "update your OS" does take me to the link you provided in your answer above.

Second, the OS on my Azure server is 2012 R2. The page from the link in your answer shows 2012 R2 as a "supported OS". However, I can't find anything about how to make the needed change to 2012 R2 - only Windows 7 SP1 and Server 2008.

The other thing is that despite the multiple emails saying that I use Log Analytics in Azure Monitor, I've never used it to my knowledge. I have even checked the server to see if I can find an installed program or feature with that name and I can't find anything.
bharathn-msft 5,096 Reputation points Microsoft Employee

2020-08-17T22:34:00.177+00:00

@David Kuehner Thank you for circling back and confirming that you are also seeing the same link of documentation. As called out earlier that as per current documentation "the change does not require any customer action unless you are running the Azure Log Analytics agent on a legacy OS version (Windows 7, Windows Server 2008 R2 and Windows Server 2008)". Since your VM's in Azure are running on Windows Server 2012 R2 even though its part of supported versions you shouldn't see an impact. Regarding why you got the notification emails , I will check with our internal team and circle back on what criteria they have chosen to update customers on this. Will keep you updated.

Please feel free to revert back if you have any other queries. Thank you.
bharathn-msft 5,096 Reputation points Microsoft Employee

2020-08-21T04:22:26.51+00:00

@David Kuehner - Checking to see if you had a chance to review the above information and have any further queries. I reached out to our Internal team to understand why notification will be trigged if you don't have any Log Analytics Agent installed, will keep you updated as I get more information. Apologies for the delay on it.
bharathn-msft 5,096 Reputation points Microsoft Employee

2020-08-21T21:08:50.027+00:00
@David Kuehner - Post validation with our team , below are the possible scenarios on when the notification has been trigged.

If you are admins/co-admins/owners for any subscriptions where there is or was a Log Analytics workspace

Customers can be an owner on a subscription that has a workspace with no impacted machines, or it may be that the customer is an owner on a subscription that recently had a workspace but it has since been deleted

Customer might also “unknowingly” have a workspace because they are using Azure Security Center, Update Management, Change Tracking, Sentinel, etc any of the products that store data in a workspace.

Hope this information helps. Please let us know if you have any further queries. Thank you

1 answer

bharathn-msft 5,096 Reputation points Microsoft Employee

2020-08-21T21:16:58.087+00:00
@David Kuehner - Thank you for reaching out. Updating the information here for broader community users.

Customer will receive notification for upgrade to SHA-2 for log analytics in following cases:

If you are admins/co-admins/owners for any subscriptions where there is or was a Log Analytics workspace

Customers can be an owner on a subscription that has a workspace with no impacted machines, or it may be that the customer is an owner on a subscription that recently had a workspace but it has since been deleted

Customer might also “unknowingly” have a workspace because they are using Azure Security Center, Update Management, Change Tracking, Sentinel, etc any of the products that store data in a workspace.

As per current documentation the change does not require any customer action unless you are running the agent on a legacy OS version (Windows 7, Windows Server 2008 R2 and Windows Server 2008). Customers running on a legacy OS version are required to take the actions listed in the documentation on their machines before November 2, 2020 or their agents will stop sending data to their Log Analytics workspaces.

Hope this information helps. Please feel free to revert back if you have any further queries. Thank you
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Trying to deal with email from Azure saying to upgrade to SHA-2 for log analytics

1 answer

Your answer