{"id":14281,"date":"2025-12-13T03:01:34","date_gmt":"2025-12-12T18:01:34","guid":{"rendered":"https:\/\/m365jp.net\/?p=14281"},"modified":"2025-12-13T03:04:33","modified_gmt":"2025-12-12T18:04:33","slug":"mc1193408-updateaction-required-trust-digicert-global-root-g2-certificate-authority-for-using-entra-services-by-january-7-2026-2","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-12-13-mc1193408-updateaction-required-trust-digicert-global-root-g2-certificate-authority-for-using-entra-services-by-january-7-2026-2","title":{"rendered":"MC1193408 | (Update)Action Required: Trust DigiCert Global Root G2 Certificate Authority for using Entra services by January 7, 2026"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC1193408 | (Update)Action Required: Trust DigiCert Global Root G2 Certificate Authority for using Entra services by January 7, 2026<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>planForChange<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>12\/12\/2025 17:18:57<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>12\/09\/2025 00:13:18<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>02\/07\/2026 08:00:00<\/td>\n<\/tr>\n<tr>\n<th>Action Required By Date<\/th>\n<td>2026-01-07T08:00:00Z<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>  <\/p>\n<p>Updated December 12, 2025: We have updated the content. Thank you for your patience.&nbsp;<\/p>\n<p><b>Action Required: Trust the new DigiCert Certificate Authorities (CAs) for Microsoft Entra<\/b><\/p>\n<p>Starting January 7, 2026, Microsoft Entra will migrate its DigiCert certificates from the G1 root CA to the G2 root CA. Clients that pin to the DigiCert G1 root or do not trust the DigiCert G2 root may experience authentication failures.<\/p>\n<p>  <b>What are G1 and G2 root CAs?<\/b>  <\/p>\n<p>Certificate Authorities (CAs) issue digital certificates that establish trust for secure communications. A root CA is the top-level certificate in a trust chain. DigiCert Global Root G1 is the current root CA used by Microsoft Entra services. DigiCert Global   Root G2 is the newer root CA that Microsoft is migrating to for improved security and compliance. If your systems do not trust the G2 root, authentication and secure connections to Microsoft Entra services will fail.<\/p>\n<p><b>Why you\u2019re receiving this message:<\/b><\/p>\n<p>Our reporting indicates that one or more users in your organization may be using Microsoft Entra ID.<\/p>\n<p>  <b>When this will happen:<\/b>  <\/p>\n<p>January 7, 2026.<\/p>\n<p>  <b>How this affects your organization:<\/b>  <\/p>\n<ul>  <\/p>\n<li><b>Who is affected:<\/b> Organizations using Microsoft Entra ID services.<\/li>\n<p>  <\/p>\n<li><b>What will happen:<\/b><br \/> \n<ul>  <\/p>\n<li>If DigiCert G2 certificates are not trusted, authentication failures will occur when accessing Microsoft Entra services.<\/li>\n<p>  <\/p>\n<li>Impacted domains include:\n<ul>  <\/p>\n<li>login.live.com<\/li>\n<p>  <\/p>\n<li>login.windows.net<\/li>\n<p>  <\/p>\n<li>autologon.microsoftazuread-sso.com<\/li>\n<p>  <\/p>\n<li>graph.windows.net<\/li>\n<li><b>Note:<\/b> The login.microsoftonline.com domain has already been migrated to the DigiCert G2 root in Feb 2025. Customers using this domain will not be impacted, as their client systems already trust DigiCert G2.<\/li>\n<p>  <\/ul>\n<p>  <\/li>\n<p>  <\/ul>\n<p>  <\/li>\n<p>  <\/ul>\n<p>  <b>What you can do to prepare:<\/b>  <\/p>\n<ul>  <\/p>\n<li>Trust all Root and Subordinate CAs listed in the <a href=\"https:\/\/learn.microsoft.com\/azure\/security\/fundamentals\/azure-ca-details?tabs=root-and-subordinate-cas-list\">  Azure Certificate Authority details<\/a> documentation.<\/li>\n<p>  <\/p>\n<li>Ensure you trust the \u201cDigiCert Global Root G2\u201d root and its subordinate CAs (documented since September 2025).<\/li>\n<p>  <\/p>\n<li>Remove any client-side pinning to the DigiCert Global Root CA root certificate.<\/li>\n<p>  <\/p>\n<li>Update your settings now to avoid service disruption.<\/li>\n<p>  <\/ul>\n<p>  <b>Help and support:<\/b>  <\/p>\n<ul>  <\/p>\n<li>For details about DigiCert certificates, refer to&nbsp;<a href=\"https:\/\/knowledge.digicert.com\/general-information\/digicert-root-and-intermediate-ca-certificate-updates-2023\">DigiCert documentation<\/a>.<\/li>\n<p>  <\/p>\n<li>For guidance on issuer\/certificate pinning, see <a href=\"https:\/\/learn.microsoft.com\/azure\/security\/fundamentals\/azure-ca-details?tabs=certificate-authority-chains#certificate-pinning\">  Azure documentation<\/a>.<\/li>\n<p>  <\/p>\n<li>Get answers from community experts in <a href=\"https:\/\/learn.microsoft.com\/answers\/tags\/133\/azure\">  Microsoft Q&amp;A<\/a>.<\/li>\n<p>  <\/p>\n<li>If you have a support plan and need technical help, create a <a href=\"https:\/\/learn.microsoft.com\/azure\/azure-portal\/supportability\/how-to-create-azure-support-request\">  support request<\/a>.<\/li>\n<p>  <\/ul>\n<p>  <b>Compliance considerations:<\/b>  <\/p>\n<p>No compliance considerations identified, review as appropriate for your organization.<\/p>\n<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC1193408 | (Update)Action Required: Trust DigiCert Global Root G2 Certificate Authority for using Entra servi [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-14281","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/14281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=14281"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/14281\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=14281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=14281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=14281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}