get new Microsoft Trusted publisher certificate

Question

_{Tuesday, October 21, 2014 8:04 PM}

I am wondering how i get a new Microsoft Corporation Trusted Publisher Certificate?

I have two right now and the expired in 2010 and 2013. I have current root certificates but not for this trusted publisher.

I see this in excel 2013, i look in the trust center and under trusted publisher and the certmgr.msc

All replies (2)

_{Tuesday, October 28, 2014 6:08 PM ✅Answered}

Hi,

Root certificates on Windows Vista and later versions are distributed through the automatic root update mechanism. That is, they are distributed through the root certificate. When a user goes to a secure website (by using HTTPS SSL), reads a secure email message (S/MIME), or downloads an ActiveX control that is signed (code signing), and then encounters a new root certificate, the Windows certificate chain verification software checks Microsoft Update for the root certificate. If the software finds the root certificate, the software downloads the current Certificate Trust List (CTL). The CTL contains the list of all trusted root certificates in the program and verifies that the root certificate is listed there. Then, it downloads the specified root certificate to the system and installs the certificate in the Windows Trusted Root Certification Authorities Store. If the root certificate is not found, the certificate chain is not completed, and the system returns an error.

To the user, a successful root update is seamless. The user does not see any security dialog boxes or warnings. The download happens automatically. In addition, for Windows Vista and later versions, client SKUs support weekly pre-fetching from Microsoft Update to check for updated root certificate properties (for example, extended validation (EV), code signing, or server authentication properties [that is, certificate properties that are added to a root certificate]). 

For detailed technical information about how Windows updates root certificates in Windows Vista and in later versions, go to the following website:

http://technet.microsoft.com/en-us/library/cc749331(WS.10).aspx

You can also refer to the below KB article

How to get a Root Certificate update for Windows

https://support.microsoft.com/kb/931125?wa=wsignin1.0

Thanks

Sidharth

Thanks & Regards Sidharth

_{Wednesday, October 22, 2014 8:43 AM}

Hi,

Thank you for your question.

I am trying to involve someone familiar with this topic to further look at this issue.

Regards,

Melon Chen
TechNet Community Support

It's recommended to download and install Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office programs.