Action required: Microsoft Root Certificate removal taking place May 24, 2022


  • Staff
The Microsoft Root Certificate Program supports the distribution of root certificates, enabling customers to trust Windows products. As previously announced, the United States Federal PKI team formally requested the removal of the "Federal Common Policy" root certificate, also known as the "G1" root certificate, from the Microsoft Trusted Root Program.

On May 24, the "G1" root certificate is being removed by an out-of-band update. It's important that system administrators implement the "G2" root certificate, which replaces the "G1" certificate, before this date. Applications and operations which depend on the "G1" root certificate will fail after the retirement of the certificate on this date.


Read more:
 

Attachments

  • Microsoft.png
    Microsoft.png
    306 bytes · Views: 0

IanMosley

Well-known member
Member
VIP
Local time
7:24 AM
Posts
293
Location
Notts, UK
OS
Windows 11 Pro v 22H2 (Build 22621.900)
Does this meen that everyone's PC must install the G2 protocol? Or is it for Windows servers only?
 

My Computer

System One

  • OS
    Windows 11 Pro v 22H2 (Build 22621.900)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3670
    CPU
    Intel(R) Core(TM) i5-8400 CPU @ 2.80GHz 2.81 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    8.00 GB
    Graphics Card(s)
    Intel(R) UHD Grahics 630; NVIDIA Geforce GT 1030
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 1TB WDC WD10EZEX-75WN4A0 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microfoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes
    Other Info
    BaseBoard Manufacturer Dell Inc.
    BaseBoard Product 0H4VK7
    BaseBoard Version A03

jimbo45

Well-known member
Power User
VIP
Local time
7:24 AM
Posts
2,275
Location
Hafnarfjörður IS
OS
Windows XP,7,10,11 Linux Arch Linux
@IanMosley

Good question !!! I have a similar one :

How does this work for people OUTSIDE the US accessing US services / servers and for Servers situated outside the US but sometimes serving US customers. Because of cheap environmental energy here there are quite a few international server facilities situated not far from me.

Cheers
jimbo
 

My Computer

System One

  • OS
    Windows XP,7,10,11 Linux Arch Linux
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7

IanMosley

Well-known member
Member
VIP
Local time
7:24 AM
Posts
293
Location
Notts, UK
OS
Windows 11 Pro v 22H2 (Build 22621.900)
How does this work for people OUTSIDE the US accessing US services / servers and for Servers situated outside the US but sometimes serving US customers.
I've posted our concerns on the Windows Community forum.
 

My Computer

System One

  • OS
    Windows 11 Pro v 22H2 (Build 22621.900)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3670
    CPU
    Intel(R) Core(TM) i5-8400 CPU @ 2.80GHz 2.81 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    8.00 GB
    Graphics Card(s)
    Intel(R) UHD Grahics 630; NVIDIA Geforce GT 1030
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 1TB WDC WD10EZEX-75WN4A0 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microfoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes
    Other Info
    BaseBoard Manufacturer Dell Inc.
    BaseBoard Product 0H4VK7
    BaseBoard Version A03

jimbo45

Well-known member
Power User
VIP
Local time
7:24 AM
Posts
2,275
Location
Hafnarfjörður IS
OS
Windows XP,7,10,11 Linux Arch Linux
I've posted our concerns on the Windows Community forum.

Thanks also for that --good stuff. !!!

I also do some stock trading on US markets -- hopefully that won't be an issue -- but with Ms's track record on testing and QC -- who knows -- I think Horse nr 3 at the next convenient horse race might stand more chance of being successful.

Cheers
jimbo
 

My Computer

System One

  • OS
    Windows XP,7,10,11 Linux Arch Linux
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7

IanMosley

Well-known member
Member
VIP
Local time
7:24 AM
Posts
293
Location
Notts, UK
OS
Windows 11 Pro v 22H2 (Build 22621.900)
From the Windows Community Forum

Hi, I'm Elise, and I'd be happy to help with your issue.

I believe this certificate chain is only used for US government websites, and even those that are affected won't be public facing website, it seems that this only really affects government workers such as State Department or Military.

But yes if the user needs to access any of these websites or services then the G2 certificate would need to be installed on those PCs, regardless of where they are accessing the resource from.

Please let me know if you need any further assistance.

Kind Regards,
Elise
 

My Computer

System One

  • OS
    Windows 11 Pro v 22H2 (Build 22621.900)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3670
    CPU
    Intel(R) Core(TM) i5-8400 CPU @ 2.80GHz 2.81 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    8.00 GB
    Graphics Card(s)
    Intel(R) UHD Grahics 630; NVIDIA Geforce GT 1030
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 1TB WDC WD10EZEX-75WN4A0 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microfoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes
    Other Info
    BaseBoard Manufacturer Dell Inc.
    BaseBoard Product 0H4VK7
    BaseBoard Version A03

jimbo45

Well-known member
Power User
VIP
Local time
7:24 AM
Posts
2,275
Location
Hafnarfjörður IS
OS
Windows XP,7,10,11 Linux Arch Linux
From the Windows Community Forum

Hi, I'm Elise, and I'd be happy to help with your issue.

I believe this certificate chain is only used for US government websites, and even those that are affected won't be public facing website, it seems that this only really affects government workers such as State Department or Military.

But yes if the user needs to access any of these websites or services then the G2 certificate would need to be installed on those PCs, regardless of where they are accessing the resource from.

Please let me know if you need any further assistance.

Kind Regards,
Elise
Hi there

@IanMosley

That means to "renew" US Federal GOVT's IRS for exemption to IRS "Witholding Tax" for non residents / nationals I'll presumably need it.

Thanks for your efforts though much appreciated.

Now I have to go and learn what to do about this stuff as I have to file for a new IRS exemption if I want to keep trading US stocks at least on US markets without tax being deducted up front.

Why is anything to do with Govts (anywhere around the world) or Local authorities always mired in so much bureaurocracy.

Same in EVERY country I've visited not exempting my own either --- some better than others - believe it or not the UK tax people were actually quick and efficient when dealing with a query for tax over a small Gig I did in the UK - but State of California --- I don't think even the Wisdom of the Holy Ghost would have been able to fix stuff coming out of that "aptly named city" - Sacramento. !!!

For a load of people on a technical forum things like tax must rate as "Super boring" - but a load of us especially Freelancers often working part time remotely for clients all round the world things like tax can't be ignored. Some has to be paid somewhere. The trick is in how to minimize (legally) the amount you have to pay.

Cheers
jimbo
 

My Computer

System One

  • OS
    Windows XP,7,10,11 Linux Arch Linux
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7

IanMosley

Well-known member
Member
VIP
Local time
7:24 AM
Posts
293
Location
Notts, UK
OS
Windows 11 Pro v 22H2 (Build 22621.900)
Your welcome!! :)
 

My Computer

System One

  • OS
    Windows 11 Pro v 22H2 (Build 22621.900)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3670
    CPU
    Intel(R) Core(TM) i5-8400 CPU @ 2.80GHz 2.81 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    8.00 GB
    Graphics Card(s)
    Intel(R) UHD Grahics 630; NVIDIA Geforce GT 1030
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 1TB WDC WD10EZEX-75WN4A0 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microfoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes
    Other Info
    BaseBoard Manufacturer Dell Inc.
    BaseBoard Product 0H4VK7
    BaseBoard Version A03

Latest Support Threads

Top Bottom