Server Side Patch 964 on 20.3 and Patch 334 on 23.3 should resolve this.

Upgrading to 23.4 should as well.

In short, a counter-signature was missing on a core DLL so that when the signing cert expired, the signing was no longer valid.  This has been corrected and is now properly counter-signed preventing age from impacting signing validity.

Hi Craig,

So been working with our ZCM expert Bruce and we are a little stumped at this point.  We are having several machines showing the error "The Antimalware module has expired.  Contact your system administration for further details"  The majority of our machines have no issues and are not showing this error.  This morning, my machine which has had no issues are now reporting the same error as mentioned above.  Bruce has told me we are fully patched to 23.4 except for one patch but it is not showing any information regarding this issue.

First, is there anything else we can check?  Also, can you point me to the dll file explained in your post above so I can check version and date to make sure the trouble machines have the correct dll.  Are list of machines continue to grow with the error above even though we have doubled checked that our license is current and not expired.

Any insight you can provide would be appreciated.  Screen shot of error below...

Thanks

Brian

I doubt it's the same issue if its been working.....

Does your License still show as Good/Active?

If all looks good one thing you can try is 

"ZAC MR" which should remove the agent.

Then refresh and it should reinstall....No Reboots required.

"ZAC MI" will install it as well assuming a policy is assigned.

I doubt it's the same issue if its been working.....

Does your License still show as Good/Active?

If all looks good one thing you can try is 

"ZAC MR" which should remove the agent.

Then refresh and it should reinstall....No Reboots required.

"ZAC MI" will install it as well assuming a policy is assigned.

Hi Craig,

Thanks for the response...  The license is good and active through 1/31/25, Bruce and I checked that before I responded to this thread.  What were seeing is workstations will be normal and then all the sudden show the error screen shot above and there seems to be no way to recover it from this state.  The zac mr command worked but the zac mi and/or ml was not recognized.  The ZCM Agent refresh brought it back but unfortunately the error returned immediately regarding module being expired.  Very strange...

Any other thoughts?

Thanks

Brian