Share via

January 2019 Deployment Notice (23/January) - Microsoft Trusted Root Program

  • Article

On Tuesday, January 29th, 2019, Microsoft will release a planned update to the Microsoft Trusted Root Certificate Program.

This release will NotBefore the server authentication EKU for the following roots:

  1. ANCERT Certificados CGN V2 \ 7EB1A0429BE5F428AC2B93971D7C8448A536070C

Windows 10 allows us to stop trusting roots or EKU's using the "NotBefore" or "Disable" properties, both of which allow us to remove certain capabilities of the root certificate without complete removal. These features are not available on versions prior to Windows 10. Earlier versions of Windows will be unaffected by this change. The update package will be available for download and testing at https://aka.ms/CTLDownload