{"id":6302,"date":"2017-01-23T15:50:15","date_gmt":"2017-01-23T23:50:15","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/01\/23\/news-140\/"},"modified":"2017-01-23T15:50:15","modified_gmt":"2017-01-23T23:50:15","slug":"news-140","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2017\/01\/23\/news-140\/","title":{"rendered":"Microsoft updates Trusted Root Certificate Program to reinforce trust in the Internet"},"content":{"rendered":"<div class=\"ExternalClass9709646B60744891B69B0B8F65306598\">\n<p>At Microsoft, we are continuously working to deliver on our commitment to the security of our customers and their ecosystems. A core component of our strategy to inform Windows users about the safety of the websites, apps and software they\u2019re accessing online is built into the<br \/> <a href=\"https:\/\/technet.microsoft.com\/en-us\/library\/cc751157.aspx\">Microsoft Trusted Root Certificate Program<\/a>. This program takes root certificates supplied by authorized Certificate Authorities (CAs) around the world and ships them to your device to tell it which programs, apps and websites are trusted by Microsoft.<\/p>\n<p>Our efforts to provide a seamless and secure experience usually take place in the background, but today, we want to tell you about some changes we have made to this program. These crucial modifications will help us better guard against evolving threats affecting websites and the apps ecosystem, but they may impact a small set of customers who have certificates from affected partners.<\/p>\n<p>This past spring, we began engaging with Certificate Authorities (CA) to solicit feedback and talk about upcoming changes to our Trusted Root Certificate Program. Among other things, the changes included more stringent technical and auditing requirements. The final program changes were published in June 2015. Since then, we have been working, directly and through community forums, to help our partners understand and comply with the new program requirements.<\/p>\n<p>Through this effort, we identified a few partners who will no longer participate in the program, either because they have chosen to leave voluntarily or because they will not be in compliance with the new requirements. We\u2019ve published a complete list of Certificate Authorities below that are out of compliance or voluntarily chose to leave the program and will have their roots removed from the Trusted Root CA Store in January 2016. We encourage all owners of digital certificates currently trusted by Microsoft to review the list and take action as necessary.<\/p>\n<p>The certificate-dependent services you manage will be impacted if the certificates you use chain up to a root certificate Microsoft removes from the store. Though the actual screens and text vary depending on which browser a customer is using, here\u2019s what will usually happen:<\/p>\n<ul>\n<li>If you use one of these certificates to secure connections to your server over https, when a customer attempts to navigate to your site, that customer will see a message that there is a problem with the security certificate.<\/li>\n<li>If you use one of these certificates to sign software, when a customer attempts to install that software on a Windows operating system, Windows will display a warning that the publisher may not be trusted. In either case, the customer may choose to continue.<\/li>\n<\/ul>\n<p>We strongly encourage all owners of digital certificates currently trusted by Microsoft to <a href=\"https:\/\/aka.ms\/rootupdates\">review the list here<\/a> and investigate whether their certificates are associated with any of the roots we will be removing as part of the update. If you use a certificate that was issued by one of these companies, we strongly recommend that you obtain a replacement certificate from another program provider. The list of all providers is located at<br \/> <a href=\"https:\/\/aka.ms\/trustcertpartners\">https:\/\/aka.ms\/trustcertpartners<\/a>.<\/p>\n<p>With Windows 10 we will continue to work hard to provide you with safer experiences you expect from Windows, keeping you in control and helping you do great things.<\/p>\n<h2>How to determine your digital certificates<\/h2>\n<p>If you are unsure of how to determine the root of your digital certificates, I have included some guidance, by browser, below.\u00a0 For more information on the program itself, visit<br \/> <a href=\"https:\/\/aka.ms\/rootcert\">https:\/\/aka.ms\/rootcert<\/a>.<\/p>\n<h3>Microsoft Edge<\/h3>\n<ol>\n<li>Navigate to a web page that uses your certificate.<\/li>\n<li>Click the<br \/> <strong>Lock <\/strong>icon (in the web address field); the company under \u201cWebsite Identification\u201d is the company that owns the root.<\/li>\n<\/ol>\n<h3>Internet Explorer<\/h3>\n<ol>\n<li>Navigate to a web page that uses your certificate.<\/li>\n<li>Click the<br \/> <strong>Lock <\/strong>icon (in the web address field).<\/li>\n<li>Click<br \/> <strong>View Certificates <\/strong>then\u00a0<strong>Certification Path<\/strong>.<\/li>\n<li>View the certificate name at the top of the Certificate Path.<\/li>\n<\/ol>\n<h3>Chrome<\/h3>\n<ol>\n<li>Navigate to a web page that uses your certificate.<\/li>\n<li>Click the<br \/> <strong>Lock <\/strong>icon (in the web address field).<\/li>\n<li>Click<br \/> <strong>Connection<\/strong> then\u00a0<strong>Certificate Information.<\/strong><\/li>\n<li>Click<br \/> <strong>Certification Path.<\/strong><\/li>\n<li>View the certificate name at the top of the Certificate Path.<\/li>\n<\/ol>\n<h3>Firefox<\/h3>\n<ol>\n<li>Navigate to a web page that uses your certificate.<\/li>\n<li>Click the<br \/> <strong>Lock<\/strong> icon (in the web address field) then click the arrow on the right.<\/li>\n<li>Click<br \/> <strong>More Information <\/strong>then\u00a0<strong>View Certificate.<\/strong><\/li>\n<li>Click<br \/> <strong>Details.<\/strong><\/li>\n<li>View the certificate name at the top of the Certificate Path.<\/li>\n<\/ol>\n<p><em>Aaron Kornblum<\/em><br \/> <em>Enterprise &amp; Security Group Program Manager, Governance, Risk Management\u00a0&amp; Compliance <\/em><\/p>\n<\/p><\/div>\n<p><a href=\"https:\/\/blogs.technet.microsoft.com\/mmpc\/2015\/12\/17\/microsoft-updates-trusted-root-certificate-program-to-reinforce-trust-in-the-internet\/\" target=\"bwo\" >https:\/\/blogs.technet.microsoft.com\/mmpc\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>At Microsoft, we are continuously working to deliver on our commitment to the security of our customers and their ecosystems. A core component of our strategy to inform Windows users about the safety of the websites, apps and software they\u2019re accessing online is built into the Microsoft Trusted Root Certificate Program. This program takes root&#8230;<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10759,10378],"tags":[666],"class_list":["post-6302","post","type-post","status-publish","format-standard","hentry","category-microsoft","category-security","tag-uncategorized"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/6302","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=6302"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/6302\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=6302"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=6302"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=6302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}