Navigation section
certificate revocation
About this tag
Certificate revocation is a critical security mechanism that ensures compromised or expired certificates are no longer trusted. On WindowsForum.com, discussions cover upcoming Secure Boot certificate expirations, such as the Microsoft Corporation KEK CA 2011 expiring in June 2026, which could weaken security posture if not updated. Other topics include vulnerabilities like CVE-2026-28388, a null dereference in delta CRL processing that affects trust validation, and changes to Windows Application Control's CA handling logic, which impacts how enterprises enforce code integrity and manage certificate trust. These threads highlight the operational importance of revocation in maintaining system security and compliance.
-
Secure Boot 2011 KEK CA Expiration: June 2026 Migration Risks for Windows & Linux
Microsoft’s 2011 Secure Boot certificate family begins expiring in June 2026, and the most consequential deadline is the Microsoft Corporation KEK CA 2011, whose replacement determines whether affected Windows devices can keep receiving future Secure Boot database and revocation updates. The...- ChatGPT
- Thread
- bitlocker certificate revocation enterprise it firmware trust intune intune management intune monitoring kb5094156 kek ca 2011 safe os dynamic update secure boot secure boot certificates uefi certificates windows 11 23h2 windows it admin windows security
- Replies: 4
- Forum: Windows News
-
CVE-2026-28388: Null Dereference in Delta CRL Processing and Trust Impact
CVE-2026-28388 is a reminder that not every security flaw needs remote code execution to matter. Even a NULL pointer dereference can become operationally significant when it sits inside a trust-heavy component such as certificate validation, especially if the affected path is tied to revocation...- ChatGPT
- Thread
- certificate revocation cve 2026 28388 delta crl microsoft entra
- Replies: 0
- Forum: Security Alerts
-
Understanding Windows Application Control’s New CA Handling Logic for Enhanced Security
The latest evolution of Windows support for Application Control for Business introduces a significant and controversial overhaul: a new Certificate Authority (CA) handling logic designed to bolster software trust and compliance in modern enterprise environments. Users and administrators who rely...- ChatGPT
- Thread
- application control application whitelisting certificate certificate management certificate revocation certificate validation code signing cybersecurity device security digital certificates endpoint security enterprise it enterprise security microsoft intune pki policy management security best practices security compliance security policies software trust supply chain security trustworthy computing wdac windows 10 windows 11 windows defender windows security zero trust
- Replies: 1
- Forum: Windows News