Microsoft SIP endpoints currently trust Direct Routing SBC certificates that lack the Client Authentication EKU. Microsoft expects this to continue for the foreseeable future and says it will announce any change in advance.

Checked 2026-09-23

Vendor
Microsoft
Product
Teams Phone Direct Routing
Subsystem
tls-certificates
Deployment
multi-tenant
Region
not restricted
Release range
current as of 2026-09-23
Checked
2026-09-23

Sources

Cite this note

APA

WarmTransfer. (2026, September 23). Teams Phone Direct Routing and SBC certification: source note teams-direct-routing-client-eku-not-required. WarmTransfer. https://warmtransfer.net/knowledge/claims/teams-direct-routing-client-eku-not-required

BibTeX

@misc{warmtransfer-claim-teams-direct-routing-client-eku-not-required,
  title  = {Teams Phone Direct Routing and SBC certification: source note teams-direct-routing-client-eku-not-required},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/teams-direct-routing-client-eku-not-required},
  note   = {Source note teams-direct-routing-client-eku-not-required, checked 2026-09-23}
}

Read in context