Microsoft has introduced new root certificates update mechanisms in different versions of Microsoft Windows. These mechanisms have progressively focused on distributing fewer root certificates, but on making distributions as seamless as possible when a root certificate is required and is distributed via the Windows Root Certificate Program.

  1. KB293781 talks of Trusted root certificates that are required by Windows
  2. KB931125 provides a download link to a list of the third-party certification authorities (CAs) that are trusted by Microsoft and whose root certificates are distributed via the Microsoft Root Certificate Program. This article also provides information on how different versions of Windows update root certificates.
  3. KB3004394 talks of Support for urgent Trusted Root updates for Windows Root Certificate Program in Windows.