Skip to content

Latest commit

 

History

History
23 lines (16 loc) · 1.07 KB

File metadata and controls

23 lines (16 loc) · 1.07 KB
title January 2019 Deployment Notice (23/January) - Microsoft Trusted Root Program
description This document provides details about the changes made in January 2019 to the root store.
ms.date 03/04/2019
ms.service security
author kasirota
ms.author kasirota
ms.topic conceptual

January 2019 Deployment Notice (23/January) - Microsoft Trusted Root Program

On Tuesday, January 29th, 2019, Microsoft will release a planned update to the Microsoft Trusted Root Certificate Program.

This release will NotBefore the server authentication EKU for the following roots:

  1. ANCERT Certificados CGN V2 \ 7EB1A0429BE5F428AC2B93971D7C8448A536070C

Windows 10 allows us to stop trusting roots or EKU's using the "NotBefore" or "Disable" properties, both of which allow us to remove certain capabilities of the root certificate without complete removal. These features are not available on versions prior to Windows 10. Earlier versions of Windows will be unaffected by this change. The update package will be available for download and testing at https://aka.ms/CTLDownload