Recently a Microsoft 365 admin center notification Office TLS Certificate Changes MC343794 caught my attention. First of all, I thought this does not have any noteworthy impact but that is wrong. By June 30, 2022 you must make sure that your apps and systems trust the Root CA DigiCert Global Root G2. Commonly this is not a big deal because your operating systems and browsers usually get this root certificate via update mechanisms. Except you have, let’s say, special configurations. Or you have custom apps and services which only trust what’s required. The latter is and was at least the Baltimore CyberTrust Root CA certificate. Reading this made me think, wait a minute, this is what’s deployed on all session border controllers (SBCs) for Teams Direct Routing since the service was available, as far as I remember.

So I started checking the latest Microsoft Teams Direct Routing documentation, which was updated not long ago.

I did not want to name this article “Microsoft Teams Direct Routing changes you need to be aware of for Q2-Q3 2022” but that’s what we have to do. We need to be aware of and take action otherwise this can impact your custom apps and services. In regards of Teams Direct Routing telephony you must ensure that your SBCs have both mentioned public root certification authority (CA) certificates in place. If not, your Teams Direct Routing telephony might suffer after June 30th, 2022.

Note on adding the DigiCert Global Root G2 on Audiocodes Mediant VE 7.x SBC

The following information is provided as an example and if you follow/apply the guidance/change it is on your own risk. Other certified SBCs must be checked as well and might require adding the certificate as well.

First of all, we need to download the named Digicert root certificate. We can get it directly from Digicert or use the link provided by Microsoft in their documentation.

ALWAYS BE CAUTIONS if you click links to certificates on websites redirecting you to a download something elsewhere. You better be skeptical. You might not want to use the links and instead visit the providers website yourself.

On the Mediant …

After you uploaded the DigiCert Global Root G2 certificate the trusted root list should include it.

We should not forget to click on save at the end on the upper right corner. That’s it.

Additional resources

• Office TLS Certificate Changes MC343794 – Microsoft 365 Admin Center Message Center Notification
• TLS certificate changes to Microsoft 365 services including Microsoft Teams – Microsoft Tech Community
• Office TLS Certificate Changes – Microsoft 365 Compliance | Microsoft Docs
• Plan Direct Routing – Microsoft Teams | Microsoft Docs
• Microsoft Teams Direct Routing changes you need to be aware of for Q1 2022 – erik365.blog
• DigiCert Root Certificates – Download & Test | DigiCert.com