locked
Windows 7企業版的IE憑證(中繼憑證)為何到期無自動移除 RRS feed

  • 問題

  • Windows 7 企業版,目前IE憑證(中繼憑證)為何到期無自動移除,不移除的話會有甚麼影響?煩請協助確認,謝謝


    • 已編輯 AskaSuModerator 2014年12月2日 上午 03:36 修改適當標題,標題與內文相同,原始標題: Windows 7 企業版,目前IE憑證(中繼憑證)為何到期無自動移除,不移除的話會有甚麼影響?
    2014年12月2日 上午 03:33

解答

  • 您好!

    不移除,不會有任何影響。

    2014年12月2日 上午 05:03
    版主
  • Hi 曾小友

    請參考這篇KB的說明

    http://support.microsoft.com/kb/293781/en-us

    Some certificates that are listed in the previous tables have expired. However, these certificates are necessary for backward compatibility. Even if there is an expired trusted root certificate, anything that was signed by using that certificate before the expiration date requires that the trusted root certificate be validated. As long as expired certificates are not revoked, they can be used to validate anything that was signed before their expiration.

    到期受信任的中繼憑證或是根憑證,之所以沒有從IE移除的原因,是因為這些根憑證在到期前簽署核發出去的任何憑證,還是需要利用這個根憑證做驗證,所以才會保留增加相容性,建議您還是保留因為並不會造成任何影響。


    請記得將對您有幫助的回覆"標示為解答"以幫助其他尋找解答及參與社群討論的朋友們。

    Please remember to click Mark as Answer on the post that helps you. This can be beneficial to other community members reading the thread.

    2014年12月3日 上午 06:15

所有回覆

  • 您好!

    不移除,不會有任何影響。

    2014年12月2日 上午 05:03
    版主
  • 請問那存在的用意是?

    微軟方面不會主動移除嗎?

    2014年12月2日 上午 07:35
  • Hi 曾小友

    請參考這篇KB的說明

    http://support.microsoft.com/kb/293781/en-us

    Some certificates that are listed in the previous tables have expired. However, these certificates are necessary for backward compatibility. Even if there is an expired trusted root certificate, anything that was signed by using that certificate before the expiration date requires that the trusted root certificate be validated. As long as expired certificates are not revoked, they can be used to validate anything that was signed before their expiration.

    到期受信任的中繼憑證或是根憑證,之所以沒有從IE移除的原因,是因為這些根憑證在到期前簽署核發出去的任何憑證,還是需要利用這個根憑證做驗證,所以才會保留增加相容性,建議您還是保留因為並不會造成任何影響。


    請記得將對您有幫助的回覆"標示為解答"以幫助其他尋找解答及參與社群討論的朋友們。

    Please remember to click Mark as Answer on the post that helps you. This can be beneficial to other community members reading the thread.

    2014年12月3日 上午 06:15