Azure Container Registry Deprecates Docker Content Trust
Azure Container Registry (ACR) will deprecate Docker Content Trust (DCT) by March 31, 2028, as DCT no longer meets modern container supply chain security needs. Customers currently using DCT must transition to the Notary Project and its tool, Notation, before the March 31, 2028 deadline. Starting September 30, 2025, users will be unable to enable DCT on ACR, and all related data will be permanently deleted by March 31, 2028.
- →Docker Content Trust deprecation and removal
- →Transition to Notary Project and Notation recommended
Deprecations (1) ›
- Docker Content Trust deprecation and removal
Docker Content Trust (DCT) will be deprecated and removed from Azure Container Registry (ACR). DCT will no longer be available after March 31, 2028, with all signing and verification data permanently deleted on that date. Customers will be unable to enable DCT on ACR starting September 30, 2025.
Notes (1) ›
- Transition to Notary Project and Notation recommended
Users of Docker Content Trust are advised to transition to the Notary Project ecosystem, including the Notation tool, to maintain container supply chain security. Resources for signing and verification workflows with Azure Key Vault, Azure DevOps, GitHub, and Azure Kubernetes Service (AKS) are provided.
https://azure.microsoft.com/en-us/updates/?id=485241
Related releases
- Azure Updates Now Available via Microsoft Release Communications Azure Updates ·
- Azure Updates Discovery Now Generally Available Azure Updates ·
- Encryption in Transit for Azure Files NFS Shares on AKS now GA Azure Updates ·
- Azure Container Linux (ACL) available on AKS Azure Updates ·
- Azure Updates Available for AI-Powered Discovery Azure Updates ·
- Application Insights auto-instrumentation for AKS apps is GA Azure Updates ·