SEPM to RU6 MP2, some clients "Fail to execute Host Integrity check"

Hi everyone

Just upgraded SEPM from RU6 MP1a to RU6 MP2 and couple of clients reported Host Integrity Failed, with below error in logs.

Image may be NSFW.
Clik here to view.

HI policy applied is pretty much default

Image may be NSFW.
Clik here to view.   Image may be NSFW.
Clik here to view.

Tried CleanWipe/reinstall on one of the clients, error still active.
Affected clients are Windows, different OSs, latest SP/fully updated, RU6 MP1a, have in common that all are 32 bit. That being said, most of the 32-bit clients are not affected.

Anyone else seeing this?