﻿KeySuite 2026.11
BUILD TYPE: release candidate; approval and antivirus review are separate gates
Source commit: 1f987bad1382fd49513aefae7f8838f47b6b1b13

Release changes:
- KeySuite uses a new RSA 3072 SHA-256 code-signing identity for the Office add-ins, installer, and helpers.
- Setup offers to trust the public KeySuite certificate for the current Windows user, with Windows confirmation for root trust and no machine-wide trust changes.
- Silent setup does not import roots or launch Office; IT must provision the approved certificate before use.
- Uninstall removes only exact certificate entries owned by KeySuite; existing IT-managed trust is preserved.
- Customer testing linked slow PowerPoint and Windows sign-in symptoms to missing certificate trust; trusting the previous certificate resolved those reports, but the Windows-internal mechanism is unknown.
- PowerPoint and Excel functionality, subscription APIs, and Unviewable+ protection settings are unchanged.

Signing certificate: F5B89DB3E1AAC20867D8221E8DEB2861BE8D3679
Public certificate SHA-256: 5F9C336F730AC40F5532C78A16B3F5E52BAFF38DAA732838A8EC2BA2F9FE7278
Signing certificate expiry: 2029-10-20T18:43:22.0000000+02:00
Expiry review: 
Certificate trust: see 3. Certificate trust/CERTIFICATE_TRUST.txt before opening Office.

SHA-256:
- Install KeySuite 202611.exe: F5B61EE48687F2C385D0C54A58D9DBE99E0932EC1E3DC6A8CE5131BC2702BEAF
- KeySuite 202611.ppam: F549E98D19593B9A18CF768413293300979F3868090C0425534567B518125006
- KeySuite 202611.xlam: 95408F67DEBBF7FA5C80E2BBA4A39915FB7868DA30908AE64E8060EB5A0A1B6E
- KeySuite Certificate Trust.exe: EA33CF58557C74B445CD8A5925F400D9CA2C5616820D468FF760C5D09BAD87D6
