Forum Discussion

sumo83's avatar
sumo83
Iron Contributor
Nov 13, 2023

Update OpenSSL recommendation

Hi all,   I've been trying to find out how to deal with "openssl" recommendation that I get on almost all end user computers in Defender.   I'm just not sure how to deal with it... It doesn't see...
microsoft defender for endpoint
remediation
AllisonHutchence's avatar
AllisonHutchence
Copper Contributor
Nov 22, 2023

tophneal I am struggling with the same.  I found several articles - and using the following powershell command (make sure to run powershell as an admin) - I was able to narrow in on where I have OpenSSL on our machines.

 

Get-childItem libssl* -Recurse  -ErrorAction SilentlyContinue | select versioninfo -ExpandProperty versioninfo | sort ProductVersion,Filename | ft -auto

 

The culprits for us are:

Webex

Zoom

PowerBI Desktop

Salesforce ODBC drivers installed by default in Office

OneDrive

And 2 locations within c:\windows\system32\driverstore\filerepository which seem to be linked to the Intel Trusted Connect Service Client

 

I uninstalled Webex, Zoom, and PowerBI Desktop.  I deleted the Salesforce ODBC drivers.  OneDrive appears to updated itself overnight even though I have the same version this morning as I did last night - that is no longer showing up in my list.  I am left with the two locations for the Intel Trusted Connect Service Client and I am still looking for how I can update that.  I found this article - https://support.microsoft.com/en-us/surface/surface-go-update-history-c069f02e-5025-54b6-5fc1-2f5567783510 - which seems to indicate the Nov 2022 update took care of updating the Intel Trusted Connect service client.  I don't have a surface go - but I did just go through the steps in the article and it did find an update for the chipset.  I'm going to reboot and see if that did anything - as of now - nothing changed.

 

sumo83's avatar
sumo83
Iron Contributor
Nov 22, 2023
cool... great info... Will have a look at this... Thanks a lot for sharing this
  • AllisonHutchence's avatar
    AllisonHutchence
    Copper Contributor
    Nov 22, 2023
    The chipset update that was discovered via the Surface app still didn't update the Intel Trusted Connect client files. I found this article - https://support.microsoft.com/en-us/surface/download-drivers-and-firmware-for-surface-09bb2e09-2a4b-cb69-0951-078a7739e120 - that had where I could download the Surface Laptop 5 updates manually - and according to the Nov. 2023 update history - the Intel connect should have been updated - https://support.microsoft.com/en-us/surface/surface-laptop-5-update-history-9dc3d957-f661-454f-9a59-7db5ea52edac. Still showing those files are the old OpenSSL version. Beyond frustrating!