Teams Direct Routing TLS Certificate change from Baltimore

Question

Hello

Please i need your help on this issue

According to this link below, TLS Certificates for Teams Direct Routing are changing.

We have uploaded the new Digicert certificate to our SBC and removed the old Baltimore cert and it breaks the TLS connection between the SBC and Teams for Direct Routing.

If we put the Baltimore Certificate back- TLS comes back up. Please advise. Thanks. https://learn.microsoft.com/en-us/microsoft-365/compliance/encryption-office-365-tls-certificates-changes?view=o365-worldwide did not say anything

Answer 1

You should keep the Baltimore. If I'm reading the docs correctly, it's still required to October 2023.

"The current Root CA, Intermediate CA, and leaf certificates will not be revoked. The existing CA Common Names and/or thumbprints will be required through at least October 2023 based on the lifetime of existing certificates."

You've done the right thing by uploading the Digicerts. I would just leave the Baltimore and let it expire.