Azure TLS certificate changes

Question

Azure TLS certificate changes

Anuj 1

Actually, I have host IIS websites on Azure VM Windows server 2019. and using SSL of ssl2buy. I just want to know I will be impacted or not.

I also received an email " We are updating Azure services in a phased manner to use Transport Layer Security (TLS) certificates from a different set of Root Certificate Authorities (CAs). This began 13 August 2020.

Your applications may be impacted if you explicitly specify a list of acceptable CAs (a practice known as certificate pinning).

We're making this change because the current CA certificates do not comply with one of the CA/Browser Forum Baseline requirements. This was reported on 1 July 2020 and impacts multiple popular Public Key Infrastructure (PKI) providers worldwide. Today, most of the TLS certificates used by Azure services are issued from the Baltimore CyberTrust Root PKI. Following this change, Azure services will use certificates issued by a different set of CAs (Certificate Authorities), chaining up to different Root CAs."

GitaraniSharma-MSFT 50,287 Reputation points Microsoft Employee Moderator

2020-10-15T09:53:02.58+00:00

Hello @Anuj ,

Could you please provide an update on this post?

Kindly let us know if the below answer helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
GitaraniSharma-MSFT 50,287 Reputation points Microsoft Employee Moderator

2020-10-16T07:17:04.097+00:00

Hello @Anuj ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,
Gita
GitaraniSharma-MSFT 50,287 Reputation points Microsoft Employee Moderator

2020-10-20T03:44:56.047+00:00

Hello @Anuj ,

Following up again to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,
Gita

2 answers

Your answer

GitaraniSharma-MSFT 50,287 Reputation points Microsoft Employee Moderator

2020-10-15T09:53:02.58+00:00

Hello @Anuj ,

Could you please provide an update on this post?

Kindly let us know if the below answer helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
GitaraniSharma-MSFT 50,287 Reputation points Microsoft Employee Moderator

2020-10-16T07:17:04.097+00:00

Hello @Anuj ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,
Gita
GitaraniSharma-MSFT 50,287 Reputation points Microsoft Employee Moderator

2020-10-20T03:44:56.047+00:00

Hello @Anuj ,

Following up again to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,
Gita

Answer 1

boss_mafia 1

@GitaraniSharma-MSFT ,

https://learn.microsoft.com/en-us/answers/questions/117444/reminder-azure-tls-certificate-changes.html

Accept the answer

0 comments

Answer 2

Hello @Anuj ,

As per the update from backend team, we expect that most Azure customers will not be impacted. However, your application may be impacted if it explicitly specifies a list of acceptable CAs. This practice is known as certificate pinning. There are some ways to detect if your application is impacted. You can follow the below article to find out more information:
https://learn.microsoft.com/en-us/azure/security/fundamentals/tls-certificate-changes#will-this-change-affect-me

If you have any specific question, you can post the same in the below thread which is being continuously monitored for Azure TLS certificate questions:
https://learn.microsoft.com/en-us/answers/questions/117444/reminder-azure-tls-certificate-changes.html

NOTE : This question is related to Security and is tagged incorrectly. I have changed it accordingly.

Hope this helps!

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.