Blog Post

Windows IT Pro Blog
3 MIN READ

TLS server authentication: Deprecation of weak RSA certificates

Niara_Patterson's avatar
Niara_Patterson
Icon for Microsoft rankMicrosoft
May 09, 2024
TLS server authentication is becoming more secure across Windows. Weak RSA key lengths for certificates will be deprecated on future Windows OS releases later this year. Specifically, this affects TL...
Updated Oct 07, 2024
Version 4.0
servicing and updates
faebudo's avatar
faebudo
Copper Contributor
May 10, 2024

Is this recommendation in the Microsoft Trusted Root Program still valid?

 

Signatures using elliptical curve cryptography (ECC), such as ECDSA, are not supported in Windows and newer Windows security features. Users utilizing these algorithms and certificates will face various errors and potential security risks. The Microsoft Trusted Root Program recommends that ECC/ECDSA certificates should not be issued to subscribers due to this known incompatibility and risk.