Microsoft AD CS on Windows Server 2025 gains ML-DSA certificate issuance

Microsoft’s May 2026 update enables Active Directory Certificate Services to issue ML-DSA-44, ML-DSA-65 and ML-DSA-87 certificates on Windows Server 2025. Early testing found it works for code signing but that TLS-based workloads such as IIS, SSTP VPN and RDP do not yet accept ML-DSA certificates.

Read the original at Richard M. Hicks Consulting