ADCS Now Generates Post-Quantum Certificates for Windows

Active Directory Certificate Services (ADCS) now generates post-quantum certificates, a step that extends quantum-safe support beyond algorithms and APIs into a core platform component relied upon by organizations worldwide. Microsoft is integrating quantum-safe cryptography directly into how Windows handles secure connections by adding PQ TLS hybrid key exchange to the Windows Transport Layer Security (TLS) stack. This addition brings quantum-safe protection to data-in-transit scenarios, mitigating the risk of “Harvest Now, Decrypt Later” attacks where encrypted traffic is captured for future decryption with quantum computers. According to a recent Microsoft Security Community Blog post, this foundation empowers customers to build, validate, pilot, and ultimately deploy quantum-safe applications, systems, and infrastructure at scale; composite PQC algorithms are also now enabled in Windows cryptography APIs and certificate functions, allowing for more complex…