Microsoft urges organizations to start testing post-quantum certificate readiness now
Microsoft published guidance warning that post-quantum cryptography (PQC) planning cannot focus only on encrypted data — authentication systems, certificates, PKI, and hardware security modules also need to be tested for compatibility with new quantum-resistant algorithms. Microsoft launched a PQC TLS Pilot Program on August 27, 2026, letting approved certificate authorities test ML-DSA-87 based post-quantum certificate chains in closed, non-production environments. Seven pilot roots were added from providers including DigiCert, Sectigo, HARICA, and SSL.com, with rolling admissions continuing through the end of 2026. Windows 11 (from the July 28, 2026 updates) now supports evaluating ML-DSA certificates in controlled testing scenarios via Schannel.