| title | June 2022 Deployment Notice - Microsoft Trusted Root Program |
|---|---|
| description | This document provides details about the changes made in June 2022 to the root store. |
| ms.date | 6/3/2022 |
| ms.service | security |
| author | hasokol-ms |
| ms.author | hasokol |
| ms.topic | conceptual |
On Tuesday, June 28, 2022, Microsoft released an update to the Microsoft Trusted Root Certificate Program.
This release will add the following roots (CA \ Root Certificate \ SHA-1 Thumbprint):
- Visa \ Visa Public RSA Root CA \ 82EF4C64F057CA0038F0DB5B76C24B654D7CDA78
- Visa \ Visa Public ECC Root CA \ 9CB1E6FBC21AAF3D68973CB516E932C44CB9D560
Note
- As part of this release, Microsoft also updated the Untrusted CTL time stamp and sequence number. No changes were made to the contents of the Untrusted CTL but this will cause your system to download/refresh the Untrusted CTL. This is a normal update that is sometimes done when the Trusted Root CTL is updated.
- The update package will be available for download and testing at: https://aka.ms/CTLDownload
- Signatures on the Certificate Trust Lists (CTLs) for the Microsoft Trusted Root Program changed from dual-signed (SHA-1/SHA-2) to SHA-2 only. No customer action required. For more information, please visit: https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus