Windows Message Center:
Starting in July 2025, Microsoft is updating the logic used by Application Control for Business to handle signer rules that rely on TBS (To Be Signed) hash values for Microsoft intermediate certificate authorities (CAs). No policy updates are required if your existing rules reference the expiring CAs. The new logic is part of recent Windows updates, and it allows Application Control to automatically infer trust for the new 2023 and 2024 CAs.
Read more:
