The Direct Routing SBC certificate must have the SBC FQDN in the CN or SAN, must be signed by a CA in the Microsoft Trusted Root Program, and must include the Server Authentication EKU. Wildcard certificates compliant with RFC 2818 are supported.

Checked 2026-10-14

Vendor
Microsoft
Product
Teams Phone
Subsystem
Direct Routing TLS
Deployment
direct-routing
Region
not restricted
Release range
current as of 2026-10-14
Checked
2026-10-14

Sources

Cite this note

APA

WarmTransfer. (2026, October 14). Session border controller selection and certification: source note sbc-selection-msdr-certificate-requirements. WarmTransfer. https://warmtransfer.net/knowledge/claims/sbc-selection-msdr-certificate-requirements

BibTeX

@misc{warmtransfer-claim-sbc-selection-msdr-certificate-requirements,
  title  = {Session border controller selection and certification: source note sbc-selection-msdr-certificate-requirements},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/sbc-selection-msdr-certificate-requirements},
  note   = {Source note sbc-selection-msdr-certificate-requirements, checked 2026-10-14}
}

Read in context