MC1458947 – M365 Change Digest

One-line summary

Microsoft is preparing Windows for next-generation code signing, adopting stronger cryptographic standards to enhance software supply chain security.

Details

Body (from Message Center)

What and why:

Microsoft is preparing the Windows ecosystem for next-generation code signing to strengthen software supply chain security and improve trust in signed software. As cryptographic standards evolve, Microsoft is introducing newer signing technologies and guidance to help ensure the continued security and compatibility of Windows applications and drivers.

Rollout schedule:

Microsoft guidance is already available.
October 19, 2026: Microsoft Windows Production PCA 2011 expires.
End of 2026: Windows is moving toward stronger signing configurations, including RSA-3072 and SHA-384.
2027: Windows signing will transition to post-quantum signing.

Impact on your organization:

Who is affected

Software developers and publishers
Organizations that develop and distribute internal applications
IT and security administrators responsible for code-signing infrastructure

What will happen

Future Windows code-signing requirements will adopt stronger cryptographic protections.
Organizations using existing code-signing certificates or signing workflows should review their environments and assess readiness.
Software publishers might need to update certificates, tooling, or signing processes to remain aligned with future requirements.

Action required/recommendations:

Review your code-signing certificates, tooling, and signing workflows to understand any potential impact from future code-signing changes. Learn more at Preparing the Windows ecosystem for next-generation code signing.

Compliance considerations:

Stronger signing supports evolving security and compliance requirements. Review as appropriate for your organization.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-10-19T00:00:00Z",
    "ai_actions": [
      "Review code-signing certificates, tooling, and signing workflows",
      "Assess readiness for stronger cryptographic requirements"
    ],
    "ai_master_tags": [
      "Admin",
      "Security",
      "Compliance"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Microsoft is preparing Windows for next-generation code signing, adopting stronger cryptographic standards to enhance software supply chain security.",
    "ai_topics": [
      "Windows"
    ],
    "category": "planForChange",
    "details_map": {},
    "id": "MC1458947",
    "importance": 3,
    "is_major_change": false,
    "last_modified": "2026-08-21T17:00:09Z",
    "ms_products": [
      "Windows"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Windows"
    ],
    "severity": "normal",
    "tags": [
      "Admin impact"
    ],
    "title": "Preparing the Windows ecosystem for next-generation code signing"
  }
}