thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Trust Store

Collection of trusted root CA certificates maintained by an operating system, browser, or application.

Definition

A trust store determines which CAs a system will accept. Major root programs are run by Microsoft, Apple, Mozilla, and Google Chrome. Enterprises add private root CAs to managed devices through Group Policy or MDM, and removing a distrusted CA from trust stores is how browsers sanction misbehaving CAs.

Example

Chrome Root Store distrusts a CA by removing its root, causing certificates it issued to fail validation.

Exam tip

Internal certificates fail on unmanaged devices because the private root is not in their trust store.

Related terms