1 min read

Azure – You need to review if your certificates have been issued by compliant CA

As you know, certificates are more heavily used and important than ever to protect communication between clients and services.

Well, the Certificate Authority (CA) Browser (https://cabforum.org/) members recently published a report detailing multiple certificates issued by certification authorities (CA) were out the industry standard for publicly trusted CA’s.

You can read the reports here: https://bugzilla.mozilla.org/show_bug.cgi?id=1649951 and https://bugzilla.mozilla.org/show_bug.cgi?id=1650910

As a result, CA vendors have been starting revoking non-compliant CA’s and reissuing new compliant ones.

This means if you certificate(s) have been issued by one the impacted CA’s (aka revoked/being revoked), you will have to request a re-issue certificate for your services.

You can identify if you are impacted by using the Certificate Revocation tracker ( https://misissued.com/#revoked) or the DigiCert update (https://knowledge.digicert.com/alerts/DigiCert-ICA-Replacement).

Self-issued and Bring Your Own Certificate (BYOC) can also be impacted by the revocation process.

Intune – New unified certificate connector for Intune

As you may know you can use Intune to provide user or device certificate capabilities like:

Read More

AWS – CloudFormation now allows DNS-validated certificate management with Amazon Certificate Manager

As you know, Amazon Certificate Manager (ACM) is used to help managing certificates, from the creation to the renewal process.

Read More

Azure – You can now use RBAC to manage access to Key Vault (preview)

As you know, Key Vault lets you save secrets, certificates or keys in a secure way to then allows you to use it either with automation or simply as a...

Read More