Shortening of certificate lifetime validity periods, will Microsoft issued certs be impacted?

Question

Public SSL certificates will gradually have their validity periods shortened over the next few years, eventually falling to 47 days. Will Microsoft issued certs in Entra ID apps and other Azure services be impacted by these changes or will the 3 year validity period remain?

Thanks

Answer 1

Hello ITAdmin2019,

Thanks for reaching the Q&A forum. No, Microsoft-issued certificates in Entra ID apps and Azure services are not impacted by the CA/B Forum's public TLS certificate shortening (47 days by 2029). These are self-signed/internal certs exempt from CA/Browser Forum rules

Key Details

CA/B Forum Changes Apply Only to Public CAs (DigiCert, Let's Encrypt, etc.):​

Public SSL/TLS certs → 398 days → 200 days (Mar 2026) → 47 days (Mar 2029)

Drives automation for website/server certs​

Microsoft Self-Signed Certs Remain 3 Years:

• Entra ID SAML federation certs: Default 3-year validity (customizable up to 3 years)​
• Azure Key Vault certs: Configurable (recommend ≤1 year best practice)​
• App registrations: Auto-generated 3-year certs

Microsoft Entra ID maintains 3-year validity with manual rollover option no changes planned to match public CA timelines. If helps, kindly accept the answer.​

Cheers,

Jerald Felix