May 24, 2017

Customer Information – CIRRUS photo Instruments – Instructions Available for Update

Dear Customer:

We are writing to you today because you own a CIRRUS™ photo instrument from ZEISS.

As you know, recently the “WannaCry” virus caused substantial damage to corporations and organizations around the world.

Security, including cyber security, is a top priority at ZEISS, which is why we recommend, as an additional safety measure, that customers run regular data backups and, importantly, store updated data in a safe place to preempt a potential loss of data due to a future cyber-attack.

For the CIRRUS Photo instrument, ZEISS strongly recommends that you update your instrument to the latest patches.

Please find instructions on the steps required attached.

Should you have any further questions, please refer to our Customer Service team.

Note : The CIRRUS Photo 1.5 and 2.0 use a different operating systems and the procedures for each are different. When following these instructions, do only the steps that apply to the instrument you are using: CIRRUS Photo 2.0 or CIRRUS Photo 1.5. 1. Disconnect the instrument from all networks. a. Disconnect the network cable from the instrument. b. Power on or reboot the instrument. c. In the menu bar of the Application Software, select Tools > Service Access. d. For password, type: Meditec e. Select Explorer (from Windows Functions menu). The Windows Explorer window opens. COR.8964 f. Right-click on the Computer icon and select Manage. g. Open Services and Applications > Services.

2660021167848

Rev. A 2017 A Rev. - 05

h. Right-click on Windows Update and select Start. i. Close the Computer Management window.

Carl Zeiss Meditec, Inc. • 5160 Hacienda Drive, Dublin, California 94568 • Tel: 1 800 341 6968 • Fax: 1 925 557 4101 • www.zeiss.com/med

2. Assess the instrument’s protection. CIRRUS Photo a. From the Windows Explorer window, right-click on the Computer icon and select 2.0 Properties. b. Select Control Panel Home. c. Select Programs and Features. d. Select View Installed Updates.

e. Search for an installed patch: . In the search field, type: KB4015549 and press Enter. . If “No items match your search” appears, type: KB4019264 and press Enter. . If “No items match your search” appears, type: KB4012215 and press Enter. . If “No items match your search” appears, type: KB4012212 and press Enter. . If “No items match your search” appears, type: KB4015552 and press Enter. f. If any of these patches are already installed, go to step 4. g. If none of these patches were installed, go to step Error! Reference source not found..

CIRRUS Photo a. From the Windows Explorer window, select the + symbol next to the Computer icon to expand its sub-folders b. Select Control Panel. c. Double-click on Add or Remove Programs. d. Check Show Updates. COR.8964

e. Select Windows XP-Software Updates. 2660021167848 f. Scroll through the list of updates to determine whether the following update is installed: KB4012598 . g. If the Security Update KB4012598 is not installed; go to step 3.

h. If the Security Update KB4012598 is already installed; go to step 4. Rev. A

3. (If required) Install the patch. 2017 a. Identify an office PC that has been updated with appropriate Microsoft Windows ® security - updates and installed with anti-virus software with updated virus definitions. 05

b. Ensure the PC is clean of any virus infections (including the WannaCry ransom-ware virus).

CIRRUS Photo c. From the office PC, download the patch and Microsoft Security Essentials installer: 2.0 Download the security patch from the following location: http://download.windowsupdate.com/c/msdownload/update/software/s ecu/2017/05/windows6.1-kb4019264- x64_c2d1cef74d6cb2278e3b2234c124b207d0d0540f.msu Download Microsoft Security Essentials from the following location: http://mse.dlservice.microsoft.com/download/A/3/8/A38FFBF2-1122- 48B4-AF60-E44F6DC28BD8/enus/amd64/mseinstall.exe Note: The link is for the English version of Microsoft Security Essentials. For other languages, please visit the Microsoft website to download other versions. d. Copy the security patch and Microsoft Security Essential installer onto a clean USB mass storage device and then install the USB mass storage device on the front panel of the instrument. CIRRUS Photo c. From the office PC, download the patch from the following location: http://download.windowsupdate.com/d/msdownload/update/software/secu/ 2017/02/windowsxp-kb4012598-x86-embedded- enu_9515c11bc77e39695b83cb6f0e41119387580e30.exe d. Copy the security onto a clean USB mass storage device and then install the USB mass storage device on the front panel of the instrument. e. From the Windows Explorer, browse to the USB storage device containing the downloaded security update. f. Double-click the windows patch specified below to begin the update. Follow the on-screen instructions to complete the operation. Note: This patch may require several instrument reboots to complete.

CIRRUS Photo 2.0

CIRRUS Photo g. Patch update and installation may take up to two hours to complete. Do not power off the instrument during this operation. 4. Update . a. If running 3rd party anti-virus/ applications: Contact the vendor to confirm protection. It is recommended to regularly perform software updates and receive updated virus definitions to remain protected. COR.8964 Run a Full Virus Scan on the instrument. If your instrument is infected, then follow the on-screen prompts to clean the infected files. Contact the 3rd party anti-virus/malware

applications customer support for assistance.

b. If no 3rd party anti-virus/malware application is installed on the instrument: 2660021167848 CIRRUS Photo Plug the USB mass storage device into the CIRRUS Photo instrument. 2.0 From Windows Explorer, browse to the USB storage device containing the downloaded Microsoft Security Essentials installer. Double-click the Microsoft Security Essentials installer to begin the installation. Follow Rev. A

the on-screen instructions to complete the operation. 2017 Open Microsoft Security Essentials by double clicking the icon in the system tray. - 05

Note: Microsoft Security Essentials will automatically launch after the initial installation. Plug the network cable into the instrument. Note: The CIRRUS Photo instrument must be plugged into the network and have internet access to download updated virus definitions. Select the Update tab.

CIRRUS Photo 2.0

Click Update. Follow the on-screen prompts to update the application software and the application virus definitions. Note: Update of the software application and application virus definitions may require a

system restart. Select Home. Under Scan Options, select Full and click Scan Now.

CIRRUS Photo i. Refer to the instructions for the Microsoft Safety Scanner at the following location: COR.8964 https://www.microsoft.com/security/scanner/en-us/default.aspx ii. Download the 32-bit version onto a clean USB mass storage device.

ii. Install the USB mass storage device to the front panel of the instrument. 2660021167848 iii. Browse to the USB mass storage device.

iv. Double-click on the file: msert.exe. It takes a few moments for the Microsoft Safety Scanner to launch. Rev.

v. Check Accept all terms of the preceding license agreement and click Next. A

2017 - 05

CIRRUS Photo

A welcome screen opens.

vi. Click Next.

vii. Select Full Scan and click Next. COR.8964

2660021167848 2660021167848 Rev. A

2017 - 05

CIRRUS Photo Viii. When the full scan has completed, click . Finish

Note: A full scan will require several hours to complete. Do not to use the instrument until the full scan is complete. 5. Recovery from Infection. The following course of action is advised if the instrument is infected with the WannaCry ransom- ware virus. a. Disconnect the instrument from your network. b. Contact ZEISS Customer Support. A Field Service visit is required to resolve the threat.

CAUTION: DO NOT PERFORM A DATABASE BACKUP ON THE CIRRUS PHOTO INSTRUMENT IF A VIRUS OR SECURITY THREAT WAS IDENTIFIED. IF POSSIBLE, QUARANTINE THE DATABASE BACKUP TO A SECURE DEVICE.

We strive to ensure a high level of performance of any ZEISS instrument and an excellent experience for our customers. We apologize for any inconvenience that you may experience. COR.8964

2660021167848 2660021167848 Rev. A

2017 - 05