Message CenterMajor changeAdmin impact

MC1143929 — Certificate-based authentication changes on Windows domain controllers - coming September 2025

MC1143929WindowsplanForChangeUpdated: 28 August 2025

Since 2023, Microsoft has been sharing reminders of changes coming to certificate mapping security requirements in Windows Servers. These changes address vulnerabilities discussed in CVE-2022-34691 and others. As part of these changes, servers which run Active Directory Certificate Services, as well as Windows domain controllers that service certificate-based authentication, will be required to meet certain certificate mapping criteria in order for authentication operations to succeed. The final...

Applies to: Windows
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).