System trust stores excluded from strict enforcement
This section provides information about system trust store paths where Strict enforcement is not supported. Provisioning a trust bundle with Strict enforcement to these paths is blocked. This prevents the unintended removal of system-critical root CA certificates and potential service impact.
Platform | Restricted trust store paths |
|---|---|
Windows | |
Windows | |
Linux (Ubuntu and Red Hat Enterprise Linux) | Trust store paths containing |
注記
This list includes known system trust store paths. Paths not listed in the table, such as user-defined or application-specific trust stores, are not subject to this restriction.
This table identifies the trust store paths where Strict enforcement is restricted.
Paths not listed in the table, such as user-defined or application-specific trust stores, are not subject to this restriction.
For Ubuntu and Red Hat Enterprise Linux, provisioning is restricted for any trust store path containing cacerts or jssecacerts.