For Teams Direct Routing, the SBC certificate should carry the SBC FQDN in the CN or SAN, be signed by a CA in the Microsoft Trusted Root Program and include the Server Authentication EKU; RFC 2818-compliant wildcards are supported.

Checked 2026-10-02

Vendor
Microsoft
Product
Teams Direct Routing
Subsystem
SBC certificates
Deployment
multi-tenant
Region
not restricted
Release range
current as of 2026-10-02
Checked
2026-10-02

Sources

Cite this note

APA

WarmTransfer. (2026, October 2). Public TLS certificate lifetime reductions and UC impact: source note tls-certificate-lifetime-reduction-msdr-sbc-cert-reqs. WarmTransfer. https://warmtransfer.net/knowledge/claims/tls-certificate-lifetime-reduction-msdr-sbc-cert-reqs

BibTeX

@misc{warmtransfer-claim-tls-certificate-lifetime-reduction-msdr-sbc-cert-reqs,
  title  = {Public TLS certificate lifetime reductions and UC impact: source note tls-certificate-lifetime-reduction-msdr-sbc-cert-reqs},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/tls-certificate-lifetime-reduction-msdr-sbc-cert-reqs},
  note   = {Source note tls-certificate-lifetime-reduction-msdr-sbc-cert-reqs, checked 2026-10-02}
}

Read in context