azure Azure Updates ·

Azure Container Registry Deprecates Docker Content Trust

infraazuredeprecationengineermediaazure-aksazure-key-vault
deprecation

Azure Container Registry (ACR) will deprecate Docker Content Trust (DCT) by March 31, 2028, as DCT no longer meets modern container supply chain security needs. Customers currently using DCT must transition to the Notary Project and its tool, Notation, before the March 31, 2028 deadline. Starting September 30, 2025, users will be unable to enable DCT on ACR, and all related data will be permanently deleted by March 31, 2028.

  • Docker Content Trust deprecation and removal
  • Transition to Notary Project and Notation recommended
Deprecations (1)
  • Docker Content Trust deprecation and removal

    Docker Content Trust (DCT) will be deprecated and removed from Azure Container Registry (ACR). DCT will no longer be available after March 31, 2028, with all signing and verification data permanently deleted on that date. Customers will be unable to enable DCT on ACR starting September 30, 2025.

Notes (1)
  • Transition to Notary Project and Notation recommended

    Users of Docker Content Trust are advised to transition to the Notary Project ecosystem, including the Notation tool, to maintain container supply chain security. Resources for signing and verification workflows with Azure Key Vault, Azure DevOps, GitHub, and Azure Kubernetes Service (AKS) are provided.

Read the original announcement →

https://azure.microsoft.com/en-us/updates/?id=485241

Related releases