root certificates for Azure Database for MySQL Flexible Server after 31 July 2025

Question

Hello,

I have received information on Azure Cloud:

TRACKING ID: PSK8-5QZ

To maintain your security and compliance standards, we’ll be changing the root certificates for Azure Database for MySQL Flexible Server after 31 July 2025

You can refer information: https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-root-certificate-rotation

If we already have two certificates on the App device, then we can make sure to connect, and do any more work?

Thank you!

Answer 1

Hi Giang Nguyễn Trọng,

Greetings!!

If we already have two certificates on the App device, then we can make sure to connect, and do any more work?

Yes, if your application or server already has both the current and the new root certificates installed, you are well-prepared for the upcoming Azure Database for MySQL Flexible Server root certificate rotation after 31 July 2025.

• Azure will rotate the root certificate used for SSL/TLS connections.
• The existing root (BaltimoreCyberTrustRoot) will be replaced by the new one (DigiCertGlobalRootG2).
• If both certificates are already trusted on your application or device, no further action is required.

For more information, please refer the document: https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-root-certificate-rotation#do-i-need-to-make-any-changes-on-my-client-to-maintain-connectivity

Hope this helps. Do let us know if you any further queries.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.