According to a Microsoft announcement, SHA-1 code signing will not be provided starting July 2019. Meanwhile, Trend Micro will stop SHA-1 support by the end of 2019 (i.e. all binary releases in 2020 will be SHA-2 signed only).
Customers with legacy OS (e.g. Windows 7) without the appropriate hot fix to support SHA-256 might encounter issues when our products (e.g. OfficeScan) update components with only the SHA-256 sign. Thus, it is advised to apply the Microsoft hot fix for SHA-2 support.
The following Microsoft knowledge base article provides the required hot fix:
Microsoft security advisory: SHA-1 deprecation for SSL/TLS certificates: May 9, 2017.
Additionally for OfficeScan 11.0 SP1/ XG/XG SP1 customers, it is recommended to apply the hot fix or later builds mentioned in the following article: Enhancement for digital signature checking in OfficeScan.