Microsoft tells Direct Routing and Operator Connect SBCs to trust all root CAs on its supported list (DigiCert Global Root CA, G2, G3, TLS ECC P384 Root G5, TLS RSA 4096 Root G5 and the two Microsoft 2017 roots) for both client and server certificates.
Checked 2026-10-02
- Vendor
- Microsoft
- Product
- Teams Direct Routing
- Subsystem
- mutual TLS
- Deployment
- multi-tenant
- Region
- not restricted
- Release range
- entry dated 2025-12-12
- Checked
- 2026-10-02
Sources
- What's New Direct Routing — Microsoft · tier 2 current vendor documentation · Entry 'Update on upcoming certificate changes (December 12, 2025)': Changes and call to action
Cite this note
APA
WarmTransfer. (2026, October 2). SIP trunk authentication: registration and static IP and mutual TLS: source note sip-trunk-authentication-models-teams-dr-sbc-trust-all-roots. WarmTransfer. https://warmtransfer.net/knowledge/claims/sip-trunk-authentication-models-teams-dr-sbc-trust-all-roots
BibTeX
@misc{warmtransfer-claim-sip-trunk-authentication-models-teams-dr-sbc-trust-all-roots,
title = {SIP trunk authentication: registration and static IP and mutual TLS: source note sip-trunk-authentication-models-teams-dr-sbc-trust-all-roots},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/sip-trunk-authentication-models-teams-dr-sbc-trust-all-roots},
note = {Source note sip-trunk-authentication-models-teams-dr-sbc-trust-all-roots, checked 2026-10-02}
}