Microsoft describes TLS between its Direct Routing SIP endpoints and customer SBCs as mutual TLS, with the Teams SIP interface presenting a client certificate that carries the Client Authentication EKU.
Checked 2026-10-02
TLS connectivity between Microsoft SIP endpoints and customer/partner SBCs uses mutual TLS (mTLS), requiring client certificates with the Client Authentication Extended Key Usage (EKU) property.
- Vendor
- Microsoft
- Product
- Teams Direct Routing
- Subsystem
- mutual TLS
- Deployment
- multi-tenant
- Region
- not restricted
- Release range
- entry dated 2025-12-12
- Checked
- 2026-10-02
Sources
- What's New Direct Routing — Microsoft · tier 2 current vendor documentation · Entry 'Update on upcoming certificate changes (December 12, 2025)': Background and Summary
Cite this note
APA
WarmTransfer. (2026, October 2). SIP trunk authentication: registration and static IP and mutual TLS: source note sip-trunk-authentication-models-teams-dr-mtls-microsoft-side. WarmTransfer. https://warmtransfer.net/knowledge/claims/sip-trunk-authentication-models-teams-dr-mtls-microsoft-side
BibTeX
@misc{warmtransfer-claim-sip-trunk-authentication-models-teams-dr-mtls-microsoft-side,
title = {SIP trunk authentication: registration and static IP and mutual TLS: source note sip-trunk-authentication-models-teams-dr-mtls-microsoft-side},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/sip-trunk-authentication-models-teams-dr-mtls-microsoft-side},
note = {Source note sip-trunk-authentication-models-teams-dr-mtls-microsoft-side, checked 2026-10-02}
}