Azure Container Registry Deprecates Docker Content Trust
Azure Container Registry (ACR) will deprecate Docker Content Trust (DCT) by March 31, 2028, as DCT no longer meets modern container supply chain security needs. Customers currently using DCT must transition to the Notary Project and its tool, Notation, before the March 31, 2028 deadline. Starting September 30, 2025, users will be unable to enable DCT on ACR, and all related data will be permanently deleted by March 31, 2028.
- →Docker Content Trust deprecation and removal
- →Transition to Notary Project and Notation recommended
Deprecations (1) ›
- Docker Content Trust deprecation and removal
Docker Content Trust (DCT) will be deprecated and removed from Azure Container Registry (ACR). DCT will no longer be available after March 31, 2028, with all signing and verification data permanently deleted on that date. Customers will be unable to enable DCT on ACR starting September 30, 2025.
Notes (1) ›
- Transition to Notary Project and Notation recommended
Users of Docker Content Trust are advised to transition to the Notary Project ecosystem, including the Notation tool, to maintain container supply chain security. Resources for signing and verification workflows with Azure Key Vault, Azure DevOps, GitHub, and Azure Kubernetes Service (AKS) are provided.
https://azure.microsoft.com/en-us/updates/?id=485241
Related releases
- Azure Kubernetes Service (AKS) introduces Flex Nodes in public preview Azure Updates ·
- Microsoft Named a Leader in Gartner Magic Quadrant for Container Management 2026 Microsoft Azure Blog ·
- Retirement: Azure Linux with OS Guard in Azure Kubernetes Service Azure Updates ·
- Azure Kubernetes Service Adds General Availability for Confidential VMs on Azure Linux Azure Updates ·
- Artifact Streaming on AKS is Now Generally Available Azure Updates ·
- Azure Kubernetes Service Adds General Availability for Windows Server 2025 Azure Updates ·