Enhanced Support for Microsoft KB5014754 Windows Update
Previously we’ve spoken about the Microsoft KB5014754 update that fixes vulnerabilities CVE-2022-34691, CVE-2022-26931 and CVE-2022-26923. All certificates that do not meet the strong mapping criteria after the enforcement date will be denied authentication. To keep updated on Full Enforcement Mode date, follow Versasec Notice: CBA Changes on Windows Domain Controllers.
To elaborate, the Microsoft KB5014754 introduced a change to authentication certificates. Applying the change to certification authority servers adds a non-critical extension with Object Identifier (OID) 1.3.6.1.4.1.311.25.2. It contains the user or device security identifier (SID). However, previously issued authentication certificates must be updated accordingly.
To address Microsoft KB5014754, Versasec has enhanced vSEC:CMS and vSEC:CLOUD to assist enterprises and organizations. The product enhancements identify the authentication certificates issued through Versasec products that need to be updated. With the latest product release, version 6.8, we have added a support console task to identify those certificates.
If you want access to the new support console functionality, you can download the latest evaluation version, version 6.8, on our downloads page. Please keep in mind the Microsoft change can impact your authentication. Further, if you would like to contact Versasec to assist you on using and determining what certificates need to be updated then connect with our Professional Service team at info@versasec.com.
Note: For customers with access to the Versasec Support Portal, access our step-by-step instructions in our technical article.
vSEC:CMS
Our product suite provides all the software tools to administrate and manage credentials in a secure and convenient way.
Free Product Trial
Versasec provides enabling IT security products centered on the usage of security devices such as smart cards. Our solutions enable customers to securely authenticate, issue and manage user credentials more cost effectively. Get a free product trial.
Job Openings
We are always looking for new exceptional persons to join our team! Find out more about our job openings.
Date: 2023-08-15
Author: Versasec