Summary

Between 2026-04-02 10:30 UTC and 2026-04-02 23:28 UTC, Datto RMM customers experienced failures when attempting to download and install the Datto RMM Agent. Affected users received a Windows security warning indicating an issue with the installer’s digital certificate, and installation was blocked because the code-signing certificate had been revoked. Devices with existing agents were not impacted; only new agent deployments were affected during this period.

Root Cause

The installer’s code-signing certificate had been revoked by the certificate authority, causing Windows security checks to reject the installer and preventing successful agent installation.

Incident Timeline

• Identified: 2026-04-02 10:30 UTC
• Public Notification: 2026-04-02 shortly after detection
• Resolved: 2026-04-02 23:28 UTC

Preventative Measures

To reduce the likelihood and impact of similar incidents in the future, we are taking the following steps:

Enhancements to Monitoring and Alerting:

• Implement automated synthetic monitoring to continuously validate the agent installer download and installation process.
• Include active checks for certificate validity and revocation status.
• Configure these tests to generate immediate alerts upon failure.

Enhancements to Incident Management and Response:

• Establish a dedicated on-call engineering rotation to ensure rapid response when alerts are triggered.
• Reduce the time between issue detection and remediation.