certificate authority

In a pivotal update for enterprise environments, Windows has rolled out new certificate authority (CA) handling logic for Application Control for Business, formerly known as Windows Defender Application Control (WDAC). As announced in Microsoft’s official support documentation, this adjustment...

As enterprise security needs grow more complex and digital threats evolve, Microsoft continues to adapt its security framework accordingly. With the recent overhaul in Application Control for Business—formerly known as Windows Defender Application Control (WDAC)—organizations now face...

The latest evolution of Windows support for Application Control for Business introduces a significant and controversial overhaul: a new Certificate Authority (CA) handling logic designed to bolster software trust and compliance in modern enterprise environments. Users and administrators who rely...

Enterprises relying heavily on Active Directory Certificate Services (AD CS) to secure their organizational assets are on high alert following the disclosure of CVE-2025-29968—a denial of service (DoS) vulnerability rooted in improper input validation processes within the AD CS infrastructure...

Major changes are on the horizon for Windows hardware driver development—a shift poised to impact not only device manufacturers and IT professionals, but millions of end users as Microsoft undertakes a significant revamp for the next generation of Windows 11. With the recent announcement...

The recent release of KB5057784 signals a notable tightening of security for Kerberos authentication in Windows environments. This update addresses CVE-2025-26647—a vulnerability that emerges when a certificate authority (CA) is included in the Windows root store but omitted from the NTAuth...

Many users of Windows 10 and 11 are encountering the frustrating error message: "Something went wrong and your PIN isn’t available," accompanied by the error code 0xc00000bb. This issue typically arises when attempting to log into devices using the Windows Hello for Business (WHFB) feature...

I have a client machine on the network that seems to have the same DNS entry as a server? When i go on to our certification authority server and listed on Server Manager...looking at our active rdp connections i can see the AD account name of a client having an issue that i want to help them...

Hi guys, Today I tried to test backup/restore of single domain controller. The test was performed on virtual machine Windows Server 2012 with the following roles: AD DS, DNS, DHCP and Certificate Authority. Below are the steps I did: 1. Created backup of System state. 2. Deleted disk with OS...

Severity Rating: Revision Note: V1.1 (June 13, 2012): Advisory revised to notify customers that Windows Mobile 6.x, Windows Phone 7, and Windows Phone 7.5 devices are not affected by the issue. Summary: Microsoft is aware of active attacks using three unauthorized digital certificates derived...

Revision Note: V1.0 (June 3, 2012): Advisory published. Summary: Microsoft is aware of active attacks using three unauthorized digital certificates derived by a Microsoft Certificate Authority. An unauthorized certificate could be used to spoof content, perform phishing attacks, or...

Windows 7 Forums and Windows 8 Forums now support 256-bit SSL encryption on the website. However, this type of encryption will not work for logins and such due to the way our salt/hash/MD5 layer encryption system already works. Images and non-text content will also appear unencrypted, since they...

Revision Note: V3.0 (September 6, 2011): Revised to announce the release of an update that addresses this issue. Advisory Summary:Microsoft is aware of active attacks using at least one fraudulent digital certificate issued by DigiNotar, a certification authority present in the Trusted Root...

Revision Note: V4.0 (May 10, 2011): Announced the release of an update for Windows Mobile 6.x devices. Advisory Summary:Microsoft is aware of nine fraudulent digital certificates issued by Comodo, a certification authority present in the Trusted Root Certification Authorities Store, on all...

http://arstechnica.com/security/news/2009/12/how-to-get-set-with-a-secure-sertificate-for-free.ars Anyone operating a server on any scale should want a digital certificate to encrypt data between clients and services, whether for personal, office, or public use. Ars tells you how to obtain and...