Microsoft will no longer sign its own certificates presented to anynode for TLS connections using the Baltimore CyberTrust Root CA, but rather the DigiCert Global Root CA. The transition to certificates issued by the new certification authority will begin at the end of August 2023.
On September 5, 2023, Microsoft will conduct a 24-hour test for this change. During this test, all Microsoft SIP endpoints will be switched to certificates leading to the “DigiCert Global Root G2” certification authority. All anynode customers using one or more Microsoft Teams Direct Routing trunks and not using version 4.8 or higher, or those who haven’t manually installed a certificate should expect certificate verification failures and disrupted connections on September 5.
Ensure that the additional DigiCert certificate has been added to the Trusted List in the Teams Node. To ensure connectivity both before and after the transition, both Root CA certificates must be listed in anynode’s Trusted Certificates list.
Starting from version 4.8, anynode handles this automatically through the Migration Assistant. The new DigiCert root certificate will be automatically added to the Trusted Peer Certificates list. So, if you’re using anynode 4.8, you don’t need to take any further action. For users of older anynode versions, we strongly recommend manually adding the new root certificate to the Trusted Peer Certificates to avoid unnecessary disruptions. You can download the required DigiCert Global Root G2 certificate directly from the DigiCert website.
Further information is available on our anynode homepage, detailing where you can view and edit the list of Trusted Peer Certificates in the anynode frontend.