{"id":5778,"date":"2026-08-27T10:13:11","date_gmt":"2026-08-27T10:13:11","guid":{"rendered":"https:\/\/signmycode.com\/blog\/?p=5778"},"modified":"2026-08-27T10:13:12","modified_gmt":"2026-08-27T10:13:12","slug":"windows-code-signing-moves-toward-post-quantum-security-in-2027","status":"publish","type":"post","link":"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/","title":{"rendered":"Windows Code Signing Moves Toward Post Quantum Security in 2027"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Microsoft is in the process of shaping major changes to <a href=\"https:\/\/signmycode.com\/windows-code-signing\">Windows code signing<\/a> that will have the effect of altering the certificate infrastructure, the cryptographic algorithms, and, in the end, how Windows applications will be protected against future quantum computing threats.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The changes are of particular importance to developers, IT administrators, security teams, and organizations that are using their custom software or security tools that can do their own code signature validation.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Transition has Three Major Stages:<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Replacing the <strong>Windows Production PCA 2011 certificate in 2026<\/strong><\/li>\n\n\n\n<li>Moving to advanced signing configurations including RSA-3072 and SHA-384<\/li>\n\n\n\n<li>Finally planning to move toward post-quantum cryptography (PQC) for Windows Production in 2027.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Windows Production PCA 2011 Certificate to Expire in October 2026<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Windows Production PCA 2011 certificate is one of the initial modifications that will occur. <strong>This certificate is set to expire on October 19, 2026.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The company has already begun its efforts to change the authority of the certificate. Regardless, one should not see problems with the majority of Windows applications, as their software is able to determine if the application is valid from both a legal and technical point of view.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Recommended:<\/strong> <a href=\"https:\/\/signmycode.com\/blog\/google-cloud-kms-adds-generally-available-quantum-safe-digital-signatures\/\">Google Cloud KMS Adds Generally Available Quantum-Safe Digital Signatures<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nonetheless, compatibility issues may arise with applications that are programmed to assume that certain signing rules have always been in place.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For instance<\/strong>, the application may be written to trust the specific certificate issuing company known as Windows Production PCA 2011, or it may check the specific thumbprint or have other criteria.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Once Microsoft changes its certificate hierarchy, the application may run into something like:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Expected:<\/strong> Old Microsoft certificate<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Received:<\/strong> New Microsoft certificate<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Old \u2260 New<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \u2193<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Application rejects software<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This could cause legitimate Microsoft-signed software to be incorrectly rejected even though Windows itself considers the new certificate valid.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Microsoft&#8217;s Windows Code-Signing Timeline<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The transition can be summarized as follows:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Period<\/strong><\/td><td><strong>Change<\/strong><\/td><\/tr><tr><td><strong>October 19, 2026<\/strong><\/td><td>Windows Production PCA 2011 certificate expires<\/td><\/tr><tr><td><strong>2026<\/strong><\/td><td>Microsoft moves toward stronger signing configurations, including RSA-3072 and SHA-384<\/td><\/tr><tr><td><strong>2027<\/strong><\/td><td>Windows Production signing is planned to move toward post-quantum cryptography by default<\/td><\/tr><tr><td><strong>Beyond 2027<\/strong><\/td><td>Continued certificate rotations and cryptographic updates are expected<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><a><\/a>Hard-Coded Certificate Checks Create Compatibility Risks<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The biggest concern for developers is not the certificate replacement itself, but software that has been designed around a specific certificate or signing configuration.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For example<\/strong>, a poorly designed application might effectively perform a check such as:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">if certificate_thumbprint == &#8220;ABC123&#8230;&#8221;:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp; allow<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">else:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp; reject<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This approach is fragile because certificates are expected to expire and be replaced.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A better approach is to use <strong>Windows-supported trust-validation mechanisms<\/strong> to determine whether a signature is valid and whether the certificate chain leads to a trusted authority.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The same principle applies to hard-coded values for:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Certificate thumbprints<\/li>\n\n\n\n<li>Certificate hashes<\/li>\n\n\n\n<li>Certificate Authority names<\/li>\n\n\n\n<li>Certificate issuers<\/li>\n\n\n\n<li>Certificate subjects<\/li>\n\n\n\n<li>Specific signing algorithms<\/li>\n\n\n\n<li>Other fixed signing identifiers<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Developers should avoid assuming that Microsoft&#8217;s current certificate hierarchy or cryptographic configuration will remain unchanged indefinitely.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Recommended:<\/strong> <a href=\"https:\/\/signmycode.com\/blog\/aws-kms-embraces-the-quantum-era-with-ml-dsa-digital-signature-support\/\">AWS KMS Embraces the Quantum Era with ML-DSA Digital Signature Support<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><a><\/a>Microsoft Is Moving Toward Stronger Cryptography<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft is enhancing the cryptographic standards that are used for Windows Production signing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The target is to use RSA-3072 and SHA-384 configurations through 2026.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>RSA-3072 and SHA-384<\/strong> have different roles in the cryptographic process. The RSA standard is a public-key cryptography system that is intended to generate digital signatures, while SHA-384 is the hash function that is applied during the signing process.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The simplified signing process is presented below:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Software<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp; \u2502<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp; \u25bc<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">SHA-384 hash<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp; \u2502<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp; \u25bc<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Digital signature<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp; \u2502<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp; \u25bc<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Certificate<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp; \u2502<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;&nbsp;&nbsp; \u25bc<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Windows verifies signature<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The important point for developers is that applications should not unnecessarily depend on one specific algorithm.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For example, an application that assumes:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Signature algorithm = SHA-256<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">could encounter problems if Microsoft legitimately moves to a stronger configuration.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Software should instead use supported Windows validation mechanisms and remain as <strong>algorithm-agnostic as practical<\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Post-Quantum Cryptography Is Planned for 2027<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Changes in the long run refer to Microsoft&#8217;s driving force for post-quantum cryptography.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Public-key cryptography today is based on hard mathematical problems for regular computers. However, a powerful enough quantum computer could threaten some of the public-key encryption algorithms used today.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/signmycode.com\/blog\/pqc-code-signing-in-a-cnsa-2-0-world-preparing-for-the-quantum-leap\/\">Post-quantum cryptography<\/a> refers to cryptography meant to protect against attacks by quantum computers. The transition to Windows production signing will happen in 2027.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, it does not mean that quantum computers will start to hack Windows in 2027. Microsoft is utilizing the head start in migrating to post-quantum cryptography because it requires a great deal of time to change the crypto systems across a wide ecosystem of software products.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The transition can be viewed as:<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2026<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;\u2502<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;\u251c\u2500\u2500 Replace Windows Production PCA 2011<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;\u2502<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;\u251c\u2500\u2500 Stronger signing configurations<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;\u2502&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \u251c\u2500\u2500 RSA-3072<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;\u2502&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \u2514\u2500\u2500 SHA-384<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;\u2502<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;\u25bc<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>2027<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;\u2502<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;\u2514\u2500\u2500 Post-quantum cryptography<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Which Organizations Are Most Likely to Be Affected?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Most ordinary Windows users are unlikely to notice these changes directly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The greater risk exists in organizations that operate applications or security systems performing their own certificate validation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>These may include:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Custom internal applications<\/li>\n\n\n\n<li>Enterprise software<\/li>\n\n\n\n<li>Software deployment systems<\/li>\n\n\n\n<li>Application allowlisting solutions<\/li>\n\n\n\n<li>Security tools<\/li>\n\n\n\n<li>Endpoint protection products<\/li>\n\n\n\n<li>Code-signing validation systems<\/li>\n\n\n\n<li>Custom scripts and automation<\/li>\n\n\n\n<li>Applications using private trust stores<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>For example<\/strong>, an organization&#8217;s security tool might maintain a private trust store containing Microsoft&#8217;s certificates. If that system depends on an old certificate that Microsoft replaces, the organization may need to update its configuration.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What IT Administrators Should Do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Organizations should begin reviewing software and systems that perform custom code-signature validation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">First, IT teams should identify applications and security tools that validate Windows signatures independently rather than relying entirely on the Windows trust infrastructure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>They should then check whether those systems contain dependencies on specific:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Certificate thumbprints<\/li>\n\n\n\n<li>Certificate hashes<\/li>\n\n\n\n<li>Certificate Authorities<\/li>\n\n\n\n<li>Certificate issuers<\/li>\n\n\n\n<li>Certificate names<\/li>\n\n\n\n<li>Signing algorithms<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Organisations should reach out to major software providers to ensure that their software is updated according to Microsoft&#8217;s new certification and changes in cryptography.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Particular emphasis should be put on private trust stores, as they may have to go through manual procedures in case of a shift on the certificate hierarchy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Last but not least, companies must start thinking of post-quantum cryptography and integrate it into their long-term plans even if its implementation is not yet required by regulation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft\u2019s new Windows code-signing technologies tend to focus less on hindering existing Windows apps, but rather on making it possible for applications to accept changes to security arrangements.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For the majority of Windows customers, the adjustment will likely happen seamlessly. Actually, major compatibility issues may occur if the program or the security tools cannot avoid hardware assumptions about Microsoft&#8217;s certificates or encryption algorithms.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It means that the developers should regard only the values of Windows merit-based systems and not the fingerprints of the certificate they might use or their respective signing method.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The IT department should then check their systems with the help of the signing platform and conduct trial runs of the applications that have been developed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The broader message is straightforward: software should trust a valid and trusted signing chain\u2014not depend on one particular certificate or algorithm forever.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft is in the process of shaping major changes to Windows code signing that will have the effect of altering the certificate infrastructure, the cryptographic algorithms, and, in the end, how Windows applications will be protected against future quantum computing threats. The changes are of particular importance to developers, IT administrators, security teams, and organizations&hellip; <a class=\"more-link\" href=\"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/\">Read More <span class=\"screen-reader-text\">Windows Code Signing Moves Toward Post Quantum Security in 2027<\/span><\/a> <\/p>\n","protected":false},"author":1,"featured_media":5779,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,641],"tags":[938,940,939],"class_list":["post-5778","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-code-signing-updates","category-windows-security","tag-post-quantum-code-signing-in-windows","tag-post-quantum-windows-code-signing","tag-windows-code-signing-for-the-post-quantum-era","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Windows Code Signing Enters the Post Quantum Era in 2027<\/title>\n<meta name=\"description\" content=\"Post quantum code signing could arrive on Windows in 2027. Explore Microsoft\u2019s plans and what developers need to know about the upcoming security shift.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Windows Code Signing Enters the Post Quantum Era in 2027\" \/>\n<meta property=\"og:description\" content=\"Post quantum code signing could arrive on Windows in 2027. Explore Microsoft\u2019s plans and what developers need to know about the upcoming security shift.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/\" \/>\n<meta property=\"og:site_name\" content=\"SignMyCode - Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-27T10:13:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-27T10:13:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/08\/microsoft-pqc-transmision.avif\" \/>\n\t<meta property=\"og:image:width\" content=\"912\" \/>\n\t<meta property=\"og:image:height\" content=\"453\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Janki Mehta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Janki Mehta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/windows-code-signing-moves-toward-post-quantum-security-in-2027\\\/\",\"url\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/windows-code-signing-moves-toward-post-quantum-security-in-2027\\\/\",\"name\":\"Windows Code Signing Enters the Post Quantum Era in 2027\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/windows-code-signing-moves-toward-post-quantum-security-in-2027\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/windows-code-signing-moves-toward-post-quantum-security-in-2027\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/microsoft-pqc-transmision.avif\",\"datePublished\":\"2026-08-27T10:13:11+00:00\",\"dateModified\":\"2026-08-27T10:13:12+00:00\",\"description\":\"Post quantum code signing could arrive on Windows in 2027. Explore Microsoft\u2019s plans and what developers need to know about the upcoming security shift.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/windows-code-signing-moves-toward-post-quantum-security-in-2027\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/signmycode.com\\\/blog\\\/windows-code-signing-moves-toward-post-quantum-security-in-2027\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/windows-code-signing-moves-toward-post-quantum-security-in-2027\\\/#primaryimage\",\"url\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/microsoft-pqc-transmision.avif\",\"contentUrl\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/microsoft-pqc-transmision.avif\",\"width\":912,\"height\":453,\"caption\":\"Windows Code Signing for the PQC Era\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/windows-code-signing-moves-toward-post-quantum-security-in-2027\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Windows Code Signing Moves Toward Post Quantum Security in 2027\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/\",\"name\":\"SignMyCode - Blog\",\"description\":\"Code Signing News, Updates\",\"publisher\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#organization\",\"name\":\"SignMyCode.com\",\"url\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/10\\\/logo1.png\",\"contentUrl\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/10\\\/logo1.png\",\"width\":135,\"height\":86,\"caption\":\"SignMyCode.com\"},\"image\":{\"@id\":\"https:\\\/\\\/signmycode.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Windows Code Signing Enters the Post Quantum Era in 2027","description":"Post quantum code signing could arrive on Windows in 2027. Explore Microsoft\u2019s plans and what developers need to know about the upcoming security shift.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/","og_locale":"en_US","og_type":"article","og_title":"Windows Code Signing Enters the Post Quantum Era in 2027","og_description":"Post quantum code signing could arrive on Windows in 2027. Explore Microsoft\u2019s plans and what developers need to know about the upcoming security shift.","og_url":"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/","og_site_name":"SignMyCode - Blog","article_published_time":"2026-08-27T10:13:11+00:00","article_modified_time":"2026-08-27T10:13:12+00:00","og_image":[{"width":912,"height":453,"url":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/08\/microsoft-pqc-transmision.avif","type":"image\/jpeg"}],"author":"Janki Mehta","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Janki Mehta","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/","url":"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/","name":"Windows Code Signing Enters the Post Quantum Era in 2027","isPartOf":{"@id":"https:\/\/signmycode.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/#primaryimage"},"image":{"@id":"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/#primaryimage"},"thumbnailUrl":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/08\/microsoft-pqc-transmision.avif","datePublished":"2026-08-27T10:13:11+00:00","dateModified":"2026-08-27T10:13:12+00:00","description":"Post quantum code signing could arrive on Windows in 2027. Explore Microsoft\u2019s plans and what developers need to know about the upcoming security shift.","breadcrumb":{"@id":"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/#primaryimage","url":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/08\/microsoft-pqc-transmision.avif","contentUrl":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2026\/08\/microsoft-pqc-transmision.avif","width":912,"height":453,"caption":"Windows Code Signing for the PQC Era"},{"@type":"BreadcrumbList","@id":"https:\/\/signmycode.com\/blog\/windows-code-signing-moves-toward-post-quantum-security-in-2027\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/signmycode.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Windows Code Signing Moves Toward Post Quantum Security in 2027"}]},{"@type":"WebSite","@id":"https:\/\/signmycode.com\/blog\/#website","url":"https:\/\/signmycode.com\/blog\/","name":"SignMyCode - Blog","description":"Code Signing News, Updates","publisher":{"@id":"https:\/\/signmycode.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/signmycode.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/signmycode.com\/blog\/#organization","name":"SignMyCode.com","url":"https:\/\/signmycode.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/signmycode.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2021\/10\/logo1.png","contentUrl":"https:\/\/signmycode.com\/blog\/wp-content\/uploads\/2021\/10\/logo1.png","width":135,"height":86,"caption":"SignMyCode.com"},"image":{"@id":"https:\/\/signmycode.com\/blog\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/posts\/5778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/comments?post=5778"}],"version-history":[{"count":1,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/posts\/5778\/revisions"}],"predecessor-version":[{"id":5780,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/posts\/5778\/revisions\/5780"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/media\/5779"}],"wp:attachment":[{"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/media?parent=5778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/categories?post=5778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/signmycode.com\/blog\/wp-json\/wp\/v2\/tags?post=5778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}