AD CS enhancements, innovations, and security

Thanks for joining us for Windows Server Summit! If you have any feedback about AD, AD CS or about this session, please email ADFeedback@microsoft.com. 

Here’s a list of all the links we discussed during today's session:

1. Install the necessary Windows Updates to enable the 4K to 16K expansion: aka.ms/CertExtensionLimit
2. All the CA audit events are documented here – aka.ms/MonitorPKI
3. Securing Certificate Templates: Learn more at aka.ms/SecureCertTemplates
4. Mitigating NTLM Relay Attacks on AD CS​: Apply mitigation steps published at aka.ms/KB5005413
5. Strong Certificate Mappings:
• Certificate-based authentication changes on Domain Controllers: https://aka.ms/KB5014754​
• Intune related changes: ​
• aka.ms/IntunePKCSProfile: Connector update to include the SID extension in the certificates​
• aka.ms/IntuneSCEPProfile: SID info will be added as an alternate name in SAN extension​

​Thank you!

Thanks for tuning in! We hope you enjoyed this session. Q&A will remain open through Friday. 

The Windows Server Summit 2025 continues.
Up next: Beyond the MCSE: Windows Server training and certification

We are actively working on adding PQC support to ADCS. Please stay tuned to official Microsoft announcements for updates!

Welcome to AD CS enhancements, innovations, and security and Windows Server Summit 2025! Have a question? Post it here in the Comments so we can help. Let’s make this an active Q&A!

If you prefer, you can also watch it on LinkedIn: AD CS enhancements, innovations, and security | LinkedIn

All of today's sessions will be available on demand immediately after airing. You'll see auto-generated captions during our live broadcasts, and we will update those with human-generated captions by the end of the week. Q&A will be live during the sessions, and we'll leave it open through the end of the week.

Do you plan SHA3 support ?

Do you plan a ACME enrollment method for ADCS ?

Is there a timeline for AD CS to support Post Quantum Cryptography (PQC)? What AD CS roles will support PQC?