← Microsoft Corporation cases
Bugzilla #2021175
Ca Certificate Compliance
Incident
Microsoft PKI Services: Failure to update action item status within 3 days
RESOLVED
FIXED
Microsoft Corporation
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
Microsoft PKI Services (MPS) self-reported a failure to update open incident reports within the required 3-day timeframe after action items were changed, completed, or delayed. This issue affected two specific bugs, where updates were not posted from June 2025 to February 2026. MPS identified the root cause as a lack of daily monitoring of action item statuses in their Bugzilla response process. To address this, MPS has updated its internal governance procedures to ensure timely public disclosures moving forward. All action items associated with this incident have been completed, and MPS has requested closure of the case.
Chronology
- Non-compliance identified by Microsoft PKI Services
Thread Activity
- Microsoft Corporation — Preliminary incident report submitted detailing the failure to update action items.
- Community commenter — Inquired about the delay in final incident report.
- Microsoft Corporation — Closure summary provided, detailing root causes and remediation steps.
Participants
Microsoft Corporation
Community commenter
Cabbage representative
CCADB representative
External References
Similar Local Cases
Microsoft PKI Services: Improper Disclosure of CRLs – Protocol Scheme
Microsoft PKI Services: Improper Disclosure of CRLs – Does Not Match CA Subject
Microsoft PKI Services: Improper Disclosure of CRLs – IDP – New CAs
Microsoft PKI Services: Sample Site Certificates expired
Microsoft PKI Services: Failure to report within 72 hrs - Sample Site Certs Expired
Microsoft PKI Services: Policy document bug
Microsoft PKI Services: Improper Disclosure of CRLs – IDP – Existing CAs
Microsoft PKI Services: Incorrect Revocation Reason Code