ADCS Changes in 2025:

Microsoft has re-energized its commitment to Active Directory Certificate Services (ADCS), marking a notable shift after years of minimal updates. In this month’s webinar, we explored the significance of these changes — starting with the appointment of a new product manager who has already outlined a development roadmap (including already released features like expanded audit capabilities, schema updates for post-quantum cryptography (PQC), and CRL partitioning). These changes aren’t just for Windows Server 2025 — Microsoft has indicated its intention to backport many of them to older supported versions, signaling long-term investment in AD CS and quieting industry rumors of its demise.

A key highlight was the discussion on CRL partitioning, a long-requested feature that allows organizations to split revocation data across multiple files, reducing latency and file size issues for clients. While this adds new operational complexity, it represents a major leap forward for environments that don’t support OCSP. We also looked at Microsoft’s phased approach to post-quantum cryptography readiness, with two of the three critical layers already in place, and active development underway to integrate PQC support directly into certificate templates and issuance workflows.

If you’re still treating your PKI like a static utility, you’re likely missing how fast the ground is shifting under your feet — from Microsoft’s renewed roadmap to tightening compliance timelines and shortening certificate lifespans. This webinar will challenge how you think about revocation, automation, and even the future role of your internal CA. Watch the full recording to get ahead of what’s coming — or reach out to our team if you’re wondering how these changes will affect your environment. We’ll help you figure out not just what’s new, but what it means for your strategy.