Windows AppLocker and Code Signing

[MRLeflei]

Hi,

Applocker blocks applications signed with a certificate (Signing Algorithm SHA256ECDSA). And I think that the signature algorithm is the culprit. What are the consequences if I change the key algorithm from ECDSA to RSA? Do I need to redistribute all root and intermediate certificates again?

[primetomas]

Sounds like a question you should ask Microsoft. But yes, generally if you change a Root CA you have to distribute the new Root.

[MRLeflei]

Thanks Tomas!