Tracking: Update to new .NET cert in repos

[mmitche]

Tracking the update to the new cert in the repos

Repo	Status	Notes
dotnet/runtime	Complete	dotnet/runtime#52336
dotnet/aspnetcore	Complete	dotnet/aspnetcore#32584
dotnet/winforms	Complete	dotnet/winforms#4889
dotnet-wpf-int	Complete	https://dev.azure.com/dnceng/internal/_git/dotnet-wpf-int/pullrequest/14782
dotnet/wpf	Complete	dotnet/wpf#4506
dotnet/windowsdesktop	Complete	dotnet/windowsdesktop#1617
dotnet/roslyn-analyzers	Complete	dotnet/roslyn-analyzers#5096
dotnet/sdk	Complete	dotnet/sdk#17577
dotnet/installer	Complete	dotnet/installer#10592
dotnet/roslyn	Complete	dotnet/roslyn#53360
dotnet/fsharp	Complete	dotnet/fsharp#11555
dotnet/msbuild	Complete	dotnet/msbuild#6448 https://dev.azure.com/devdiv/DevDiv/_build/results?buildId=4826873&view=results
dotnet/templating	Complete	dotnet/templating#3160
dotnet/machinelearning	Complete	dotnet/machinelearning#5794
dotnet/symreader	Complete	dotnet/symreader#242
dotnet/symreader-portable	In Progress	dotnet/symreader-portable#316 https://dev.azure.com/dnceng/internal/_build/results?buildId=1134997&view=results

https://github.com/dotnet/arcade/pull/7347/files - support for UseDotNetCertificate

[mmitche]

/cc @blowdart

[MattGal]

[Async Triage] This seems to be something @mmitche is driving and already in flight, so adding to the "Tracking" epic to get off triage.

[markwilkie]

I'd rather have this work be part of a proper epic if at all possible. @mmitche - hopefully the security work has enough "shape" to at least get an epic started?

[mmitche]

@markwilkie I don't think it's in that shape yet. There is a grab bag of security-ish related items at this point (e.g. using a different storage account for builds), but as of yet no real business goal except "we should have a secure engineering system". That box is essentially uncheckable (how do you know?), and is much larger than a single epic's scope anyway.

Lastly, changing the cert doesn't have to do with the security of the engineering system, it's more for product security and customer choices (see dotnet/announcements#184). We could make this its own epic. What do you think?

[markwilkie]

Added a placeholder epic and added this issue to it.

[mmitche]

Donezo

[cocowalla]

Are details of this new certificate available? I can't find the thumbprint or subject name, or those of the issuing certificate, either here or over on dotnet/announcements#184