← Microsoft Corporation cases
Bugzilla #1711598 Trust Bit Enablement

Provide APIs and OAuth for Microsoft to automate their root store updates to CCADB

RESOLVED FIXED Microsoft Corporation
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

This case requests that Microsoft be provided APIs (and OAuth) to automate root store updates in the Common CA Database (CCADB). The initial request was to provide an API for Microsoft to automatically push updates from RCMT to root certificate records and CA Owner records in CCADB, including root certificate record key identifiers (SHA-256 thumbprints) and CA Owner name matching. Apical Apps was asked to provide a specification for the API, with the work being actively pursued and prioritized as P1. The development work was reported as done, and the API was in testing. Later, the integration was reported as being in production, and the bug was resolved as FIXED. The thread also notes that the assignee inactivity detection change was reverted due to a detection problem.

Model: gpt-5.4-nano Generated: 2026-06-13 21:15 UTC Revised: 2026-06-16 19:17 UTC Confidence: 0.86 7 comments
Chronology
  1. Bug opened requesting Microsoft APIs to automate CCADB root store updates.
  2. Assignee inactivity detection issue was addressed; request to review the P1 bug.
  3. A detection-related change was reverted due to a problem.
  4. API integration reported as in production.
Thread Activity
  1. Community commenter — Requested APIs for Microsoft to automatically push updates from RCMT to CCADB root certificate records and CA Owner records, specifying SHA-256 thumbprints and CA Owner name matching.
  2. Community commenter — Noted Apical Apps would provide an API spec and mentioned a dependency on Natasha’s developer team availability.
  3. Community commenter — Updated priority to P1 and described the Microsoft Root Update API for Microsoft’s CCADB Auto Root Update project.
  4. Mozilla representative — Asked the assignee to be reviewed due to inactivity and referenced the auto-nag documentation.
  5. Apicalapps representative — Reported development work was done and that the API was currently being tested.
  6. Mozilla representative — Reverted a change after a problem was found with inactive-user detection.
  7. Community commenter — Reported the integration is in production now.
Participants
Community commenter Apicalapps representative Mozilla representative
Related Bugzilla IDs Mentioned
Similar Local Cases
#1166723 RESOLVED Trust Bit Enablement Public Discussion Opened By Ca Single Ca Owner Opened 2015-05-20 · Closed 2022-11-14 · 59% similar
Request for additional D-Trust root Integration with trust bit "email" (Non-TLS).
#745671 RESOLVED Trust Bit Enablement Opened 2012-04-16 · Closed 2022-11-14 · 58% similar
Enable EV and Turn on Code Signing trust bit for TWCA Root certificate
#1176188 RESOLVED Trust Bit Enablement Opened 2015-06-19 · Closed 2022-11-14 · 57% similar
Enable email trust bit for Actalis Authentication Root CA
#2019619 ASSIGNED Trust Bit Enablement Opened 2026-02-26 Still Open · 56% similar
Google Trust Services Root Strategy Plan
#515425 RESOLVED Trust Bit Enablement Opened 2009-09-09 · Closed 2022-11-14 · 56% similar
Request to enable code-object-signing "trust bit" for DigiCert's three Root CAs
#1277336 RESOLVED Root Inclusion Trust Bit Enablement Ev Enablement Opened 2016-06-01 · Closed 2022-11-14 · 39% similar
Add SSL.com root certificate(s)
#577665 RESOLVED Root Inclusion Trust Bit Enablement Opened 2010-07-09 · Closed 2022-11-14 · 37% similar
Add Trustis FPS Root CA certificate

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action