[cabfpub] Microsoft Trusted Root Certificate Program - Next Update April 26, 2016

Jody Cloutier jodycl at microsoft.com
Fri Apr 22 17:03:18 UTC 2016


On Tuesday, April 26, 2016, Microsoft will release a planned update to the Microsoft Trusted Root Certificate Program.

This release will add new roots for Digicert (Hotspot 2.0 Trust Root CA - 03); Certigna (Certigna Root CA); Trustcor (TrustCor RootCert CA-2, TrustCor ECA-1).

This release will remove the following roots at our partners' request: CA Disig a.s.; CCA India 2011; TrustCor RootCert CA-1; TrustCor RootCert CA-2 (the root above replaces this one). Unlike past releases, however, Microsoft is implementing new functionality in Windows 10 that allows us to remove these roots while leaving existing Authenticode certificates as valid. Prior operating systems will be unaffected by this change.

Finally, this release will modify several roots to remove EKUs at our partners' request. The roots to be modified are VeriSign Class 3 Public Primary CA, TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6, TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5, TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı. Microsoft will release these changes such that Windows 10 devices running the upcoming summer update will stop accepting the removed EKUs, but, in the event that the root is cross signed by another valid root, the OS will validate the certificate using the valid roots. As with the removals, older operating systems will not be affected by the removal of these EKUs.

The update package is available for download and testing at http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/test


Jody Cloutier
Senior Security Program Manager
Microsoft Trusted Root Certificate Program<http://aka.ms/rootcert>
[cid:image002.jpg at 01D19C7E.306012B0]<sip:jodycl at microsoft.com>[cid:image004.jpg at 01D19C7E.306012B0]<tel:+1%20(425)%20705-7566>[cid:image006.png at 01D19C7E.306012B0]<mailto:jody.cloutier at microsoft.com>[cid:image008.png at 01D19C7E.306012B0]<https://www.linkedin.com/in/jodycloutier>
[https://brandtools.microsoft.com/Style%20Library/BT/Images/MicrosoftMasterLogo.png]<http://microsoft.com/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160422/0e83e20c/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image009.png
Type: image/png
Size: 1181 bytes
Desc: image009.png
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160422/0e83e20c/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 799 bytes
Desc: image002.jpg
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160422/0e83e20c/attachment-0004.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.jpg
Type: image/jpeg
Size: 795 bytes
Desc: image004.jpg
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160422/0e83e20c/attachment-0005.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 925 bytes
Desc: image006.png
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160422/0e83e20c/attachment-0007.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image008.png
Type: image/png
Size: 1092 bytes
Desc: image008.png
URL: <http://lists.cabforum.org/pipermail/public/attachments/20160422/0e83e20c/attachment-0008.png>


More information about the Public mailing list