Action required: Microsoft Root Certificate removal taking place May 24, 2022


  • Staff
The Microsoft Root Certificate Program supports the distribution of root certificates, enabling customers to trust Windows products. As previously announced, the United States Federal PKI team formally requested the removal of the "Federal Common Policy" root certificate, also known as the "G1" root certificate, from the Microsoft Trusted Root Program.

On May 24, the "G1" root certificate is being removed by an out-of-band update. It's important that system administrators implement the "G2" root certificate, which replaces the "G1" certificate, before this date. Applications and operations which depend on the "G1" root certificate will fail after the retirement of the certificate on this date.


Read more:
 

Attachments

  • Microsoft.png
    Microsoft.png
    306 bytes · Views: 0
Does this meen that everyone's PC must install the G2 protocol? Or is it for Windows servers only?
 

My Computer

System One

  • OS
    Windows 11 Pro v 23H2 (Build 22631.3520)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Precision 3660 Tower Workstation
    CPU
    12th Gen Intel(R) Core(TM) i9-12900 5.10 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    32.00 GB
    Graphics Card(s)
    Intel UHD Graphics 770
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 512GB NVME PC801 NVMe SK hynix Boot
    1 x 1TB Seagate ST1000LM049-2GH172 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    PSU
    300 Watts
    Cooling
    Air
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microsoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes Premium
    Other Info
    BaseBoard Manufacturer Dell Inc.
    BaseBoard Product 0J1CP3
    BaseBoard Version A01
@IanMosley

Good question !!! I have a similar one :

How does this work for people OUTSIDE the US accessing US services / servers and for Servers situated outside the US but sometimes serving US customers. Because of cheap environmental energy here there are quite a few international server facilities situated not far from me.

Cheers
jimbo
 

My Computer

System One

  • OS
    Windows XP,7,10,11 Linux Arch Linux
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7
How does this work for people OUTSIDE the US accessing US services / servers and for Servers situated outside the US but sometimes serving US customers.
I've posted our concerns on the Windows Community forum.
 

My Computer

System One

  • OS
    Windows 11 Pro v 23H2 (Build 22631.3520)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Precision 3660 Tower Workstation
    CPU
    12th Gen Intel(R) Core(TM) i9-12900 5.10 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    32.00 GB
    Graphics Card(s)
    Intel UHD Graphics 770
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 512GB NVME PC801 NVMe SK hynix Boot
    1 x 1TB Seagate ST1000LM049-2GH172 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    PSU
    300 Watts
    Cooling
    Air
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microsoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes Premium
    Other Info
    BaseBoard Manufacturer Dell Inc.
    BaseBoard Product 0J1CP3
    BaseBoard Version A01
I've posted our concerns on the Windows Community forum.

Thanks also for that --good stuff. !!!

I also do some stock trading on US markets -- hopefully that won't be an issue -- but with Ms's track record on testing and QC -- who knows -- I think Horse nr 3 at the next convenient horse race might stand more chance of being successful.

Cheers
jimbo
 

My Computer

System One

  • OS
    Windows XP,7,10,11 Linux Arch Linux
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7
From the Windows Community Forum

Hi, I'm Elise, and I'd be happy to help with your issue.

I believe this certificate chain is only used for US government websites, and even those that are affected won't be public facing website, it seems that this only really affects government workers such as State Department or Military.

But yes if the user needs to access any of these websites or services then the G2 certificate would need to be installed on those PCs, regardless of where they are accessing the resource from.

Please let me know if you need any further assistance.

Kind Regards,
Elise
 

My Computer

System One

  • OS
    Windows 11 Pro v 23H2 (Build 22631.3520)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Precision 3660 Tower Workstation
    CPU
    12th Gen Intel(R) Core(TM) i9-12900 5.10 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    32.00 GB
    Graphics Card(s)
    Intel UHD Graphics 770
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 512GB NVME PC801 NVMe SK hynix Boot
    1 x 1TB Seagate ST1000LM049-2GH172 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    PSU
    300 Watts
    Cooling
    Air
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microsoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes Premium
    Other Info
    BaseBoard Manufacturer Dell Inc.
    BaseBoard Product 0J1CP3
    BaseBoard Version A01
From the Windows Community Forum

Hi, I'm Elise, and I'd be happy to help with your issue.

I believe this certificate chain is only used for US government websites, and even those that are affected won't be public facing website, it seems that this only really affects government workers such as State Department or Military.

But yes if the user needs to access any of these websites or services then the G2 certificate would need to be installed on those PCs, regardless of where they are accessing the resource from.

Please let me know if you need any further assistance.

Kind Regards,
Elise
Hi there

@IanMosley

That means to "renew" US Federal GOVT's IRS for exemption to IRS "Witholding Tax" for non residents / nationals I'll presumably need it.

Thanks for your efforts though much appreciated.

Now I have to go and learn what to do about this stuff as I have to file for a new IRS exemption if I want to keep trading US stocks at least on US markets without tax being deducted up front.

Why is anything to do with Govts (anywhere around the world) or Local authorities always mired in so much bureaurocracy.

Same in EVERY country I've visited not exempting my own either --- some better than others - believe it or not the UK tax people were actually quick and efficient when dealing with a query for tax over a small Gig I did in the UK - but State of California --- I don't think even the Wisdom of the Holy Ghost would have been able to fix stuff coming out of that "aptly named city" - Sacramento. !!!

For a load of people on a technical forum things like tax must rate as "Super boring" - but a load of us especially Freelancers often working part time remotely for clients all round the world things like tax can't be ignored. Some has to be paid somewhere. The trick is in how to minimize (legally) the amount you have to pay.

Cheers
jimbo
 

My Computer

System One

  • OS
    Windows XP,7,10,11 Linux Arch Linux
    Computer type
    PC/Desktop
    CPU
    2 X Intel i7
Your welcome!! :)
 

My Computer

System One

  • OS
    Windows 11 Pro v 23H2 (Build 22631.3520)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Precision 3660 Tower Workstation
    CPU
    12th Gen Intel(R) Core(TM) i9-12900 5.10 GHz
    Motherboard
    64-bit operating system, x64-based processor
    Memory
    32.00 GB
    Graphics Card(s)
    Intel UHD Graphics 770
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    Dell P2714H Monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    1 x 512GB NVME PC801 NVMe SK hynix Boot
    1 x 1TB Seagate ST1000LM049-2GH172 Internal HDD
    1 x 1TB Seagate STGX4000400 External HDD
    1 x 2TB Seagate STGX4000400 External HDD
    1 x 4TB Seagate STGX4000400 External HDD
    PSU
    300 Watts
    Cooling
    Air
    Keyboard
    Microsoft Wired Keyboard 600
    Mouse
    Microsoft USB Basic Optical Mouse v2.0
    Browser
    Firefox
    Antivirus
    Windows Defender + Malwarebytes Premium
    Other Info
    BaseBoard Manufacturer Dell Inc.
    BaseBoard Product 0J1CP3
    BaseBoard Version A01

Latest Support Threads

Back
Top Bottom