Microsoft Security Advisory (2862973)

ronjor · Aug 13, 2013

Update for Deprecation of MD5 Hashing Algorithm for Microsoft Root Certificate Program

Published: Tuesday, August 13, 2013

Version: 1.0
General Information
Executive Summary

Microsoft is announcing the availability of an update for supported editions of Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, and Windows RT that restricts the use of certificates with MD5 hashes. This restriction is limited to certificates issued under roots in the Microsoft root certificate program. Usage of MD5 hash algorithm in certificates could allow an attacker to spoof content, perform phishing attacks, or perform man-in-the-middle attacks.

The update is available on the Download Center for all affected releases of Microsoft Windows except for Windows RT (no update for Windows RT is available at this time). In addition, Microsoft is planning to release this update through Microsoft Update on February 11, 2014 after customers have a chance to assess the impact of this update and take necessary actions in their environments.

Recommendation. Microsoft recommends that customers download, test, and apply the update at the earliest opportunity. Please see the Suggested Actions section of this advisory for more information.

Note that the 2862966 update is a prerequisite and must be applied before this update can be installed. The 2862966 update contains associated framework changes to Microsoft Windows. For more information, see Microsoft Knowledge Base Article 2862966.

Known Issues. Microsoft Knowledge Base Article 2862973 documents the currently known issues that customers may experience when installing this update. The article also documents recommended solutions for these issues.
Click to expand...

https://technet.microsoft.com/en-us/security/advisory/2862973

BoerenkoolMetWorst · Aug 16, 2013

Thanks for the notice, February 2014 is still quite a while so I installed it myself.

Log in or Sign up

Microsoft Security Advisory (2862973)

ronjor Global Moderator

BoerenkoolMetWorst Registered Member

Log in or Sign up

Microsoft Security Advisory (2862973)

ronjor Global Moderator

BoerenkoolMetWorst Registered Member

Useful Searches