public key infrastructure

About this tag
Public key infrastructure (PKI) is a system of digital certificates, certificate authorities, and other registration authorities that verify and authenticate the validity of each party involved in an electronic transaction. On Windows, PKI is central to security, as certificates are used for secure communication, code signing, and identity verification. Microsoft has enforced minimum RSA key length requirements of 1024 bits for certificates used in PKI to strengthen security. Windows updates have addressed unauthorized certificates and improved certificate management, including placing compromised certificates in the Untrusted Certificate Store. These measures help protect users from spoofing and other attacks by ensuring only trusted certificates are used in Windows environments.
  1. September ANS and an important heads-up concerning certificates

    Hello there. As we prepare for September’s two security updates, we’d like to remind you about an important change to Windows’ certificate requirements included in Security Advisory 2661254 (Update For Minimum Certificate Key Length). In June, we began communicating this...
  2. August 2012 Bulletin Release

    Security Advisory 2661254 - Update For Minimum Certificate Key Length Before we get into the details of this month’s bulletin release, let’s take a look at an important change on how Windows deals with certificates that have RSA keys of less than 1024 bits in length. We’ve been...
  3. Microsoft Security Advisory (2728973): Unauthorized Digital Certificates Could Allow Spoofing - Vers

    Revision Note: V1.0 (July 10, 2012): Advisory published. Summary: Microsoft is aware of Microsoft certificate authorities that are outside our recommended secure storage practices. Upon a routine review, we are placing these certificates in the Untrusted Certificate Store, and...