← Microsoft Corporation cases
Bugzilla #2066649 Ca Certificate Compliance Incident Self Reported Incident Problem Reporting Failure Remediation Tracking

Microsoft PKI Services missed the required seven-day update for Bugzilla 2059818

ASSIGNED Microsoft Corporation
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update. Always refer to the official Bugzilla thread as the authoritative source. If you spot an inaccuracy, let me know via the contact form.
AI Summary

Microsoft PKI Services reported that it did not update open Bugzilla incident report 2059818 within the required seven-day window because no "Next update" date was recorded in the Bugzilla Whiteboard. The previous update was posted on 2026-08-14, making the next update due on 2026-08-21, but the overdue update was not posted until 2026-08-24. Microsoft said the issue was caused by an internal monitoring process that scheduled updates based on action-item changes rather than the absence of a Whiteboard next-update date. The company stated that this incident affected only the timeliness of the report update and did not affect certificate issuance, validation, revocation, or subscribers. Microsoft later asked to align the next update date with the Full Incident Report due date, and the Whiteboard was updated to show "Next update 2026-09-08."

Model: gpt-5.4-mini Generated: 2026-09-06 10:59 UTC Confidence: 0.98 4 comments
Chronology
  1. Microsoft PKI Services posted an update to Bugzilla 2059818 without recording a future next-update date.
  2. The required seven-day update deadline passed without a new update being posted.
  3. Microsoft PKI Services posted the overdue update to Bugzilla 2059818.
  4. Microsoft PKI Services opened Bugzilla 2066649 to report the missed update deadline.
  5. The Whiteboard for Bugzilla 2066649 was updated to show "Next update 2026-09-08."
Thread Activity
  1. Microsoft Corporation — Microsoft PKI Services filed a preliminary incident report saying it missed the seven-day update deadline for Bugzilla 2059818.
  2. Microsoft Corporation — Microsoft requested that the next update date be aligned with the Full Incident Report due date of 2026-09-08.
  3. Microsoft Corporation — Microsoft filed the full incident report, explaining the internal process issue and stating that no certificates were affected.
  4. Microsoft Corporation — Microsoft requested that the next update date be aligned with the remaining action item due date of 2026-09-25.
Participants
Microsoft Corporation
Related Bugzilla IDs Mentioned
Similar Local Cases
#2065157 ASSIGNED Ca Certificate Compliance Delayed Revocation Incident Self Reported Incident Opened 2026-08-20 Still Open · 72% similar
SwissSign: Delayed revocation in Bug 2057448
#2021175 RESOLVED Ca Certificate Compliance Incident Opened 2026-03-05 · Closed 2026-04-03 · 72% similar
Microsoft PKI Services: Failure to update action item status within 3 days
#2056934 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Policy Document Issue Opened 2026-07-22 Still Open · 71% similar
Actalis: failure to timely update CP/CPS for AgID SubCAs
#2053948 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Ccadb Disclosure Issue Opened 2026-07-09 Still Open · 71% similar
IdenTrust: Delayed disclosure of Intermediate CA in CCADB
#2041774 RESOLVED Ca Certificate Compliance Incident Self Reported Incident Repository Issue Opened 2026-05-22 · Closed 2026-08-13 · 71% similar
OATI: AIA CA Issuer field pointing to PEM encoded cert
#2057919 ASSIGNED Incident Problem Reporting Failure Revocation Issue Delayed Revocation Opened 2026-07-26 Still Open · 70% similar
SSL.com: Failure to respond to Certificate Problem Report within 24 hours
#2059818 ASSIGNED Ca Certificate Compliance Incident Self Reported Incident Audit Finding Opened 2026-07-31 Still Open · 70% similar
Microsoft PKI Services: Third-Party Code Signing CPS missed annual update and four Issuing CAs
#2058261 ASSIGNED Ca Documents Incident Self Reported Incident Policy Document Issue Opened 2026-07-27 Still Open · 70% similar
Google Trust Services: CPS Missing root program attestation

We use only essential cookies and local browser storage for preferences and security. See our Privacy Policy for details.

Confirm action