question

kiwookhong-0750 avatar image
0 Votes"
kiwookhong-0750 asked DaisyZhou-MSFT commented

what is the default root ca list in Windows 10 by default

Hi,
I am wondering about the root ca list that Windows 10 has by default.
In other words, if a user format the PC and install Windows 10 or a user buy a new PC from any OEM, what is the root ca list in that OS?

What I am wondering is this root ca.
"USERTrust RSA Certification Authority"

Is there a chance for any pure Windows 10 doesn't contain this CA?
Or can we guarantee that we have that CA inside Windows 10?

windows-10-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

KapilArya avatar image
1 Vote"
KapilArya answered kiwookhong-0750 commented

Hello,

By default, Windows 10 have a Trusted Root Certification Authorities store which contains list of all leading trusted CAs across globe. It is there, so that certificates issued by Intermediate CAs which have certificate issued by these trusted root CAs, gets accepted. I believe this list is updated with every version. As far as I know, earlier Google has its own root CA which was listed in Trusted Root Certification Authorities store. But now as we no longer have Google root CA, I can't find it in root CA store of Windows.

You can submit your feedback to Microsoft about the Trusted Root Certification Authorities store.

Regards.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for the answer!

0 Votes 0 ·
DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered DaisyZhou-MSFT commented

Hello @kiwookhong-0750,

Thank you for posting here.

I have checked one Windows 10 client in my lab, here is the root CA list on this machine, it includes "USERTrust RSA Certification Authority" you mentioned.
95454-root.png

And I have checked several other Windows 10 clients (with different OS) including my working client, there is also this certificate "USERTrust RSA Certification Authority" you mentioned.
95455-root1.png


Is there a chance for any pure Windows 10 doesn't contain this CA?
Or can we guarantee that we have that CA inside Windows 10?
A: After my view, it seems this root ca certificate is installed in "Trusted Root Certification Authority" on all Windows 10 clients by default.

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.



root.png (107.0 KiB)
root1.png (28.7 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you for your answer it was helpful!

0 Votes 0 ·

Hello @kiwookhong-0750,

Thank you for your update and accepting the helpful reply as answer. I am very glad that the information is helpful.

As always, if there is any question in future, we warmly welcome you to post in this forum again. We are happy to assist you!


Best Regards,
Daisy Zhou


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·