check before: 2026-04-15
Product:
Exchange, Microsoft 365 suite, SharePoint, Teams
Platform:
Linux, Online, World tenant
Status:
Change type:
User impact, Admin impact
Links:
Details:
Summary:
Starting April 15, 2026, browsers and platforms will distrust DigiCert Global Root CA (G1). Microsoft 365 services use newer certificates, so most users won't be affected. Legacy scenarios may face TLS errors. If issues arise, verify the certificate chain and contact Microsoft Support referencing the April 2026 distrust.
Details:
[Introduction]
To support industry-wide security improvements and modern cryptographic standards, browsers and platforms that follow Mozilla and Chrome trust stores will begin distrusting the DigiCert Global Root CA (G1) starting April 15, 2026. Microsoft has already migrated Microsoft 365 services to newer, more secure certificate hierarchies (such as DigiCert Global Root G2 and G3).
We're sharing this notification to help you quickly identify and respond to any unexpected certificate-related connection issues that may arise in edge scenarios due to this industry trust change. This change is driven by industry trust store updates and does not represent a new change or rollout within Microsoft 365 services.
[When this will happen]
April 15, 2026: Industry-wide distrust of DigiCert Global Root CA (G1) begins
Microsoft monitoring period: April 15, 2026 and onward
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2026-04-17
updated:
2026-04-17
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
TLS Connection Failures
Legacy systems may experience TLS connection failures due to the distrust of DigiCert Global Root CA (G1), leading to potential service interruptions.
- roles: IT Support, System Administrators
- references: https://techcommunity.microsoft.com/t5/microsoft-365-blog/exchange-online-sharepoint-online-and-microsoft-teams-april/ba-p/3741230
Intermittent Service Errors
Users may encounter intermittent service errors such as NET::ERR_CERT_AUTHORITY_INVALID or SEC_ERROR_UNKNOWN_ISSUER, affecting their ability to access Microsoft 365 services.
- roles: End Users, Help Desk Staff
- references: https://techcommunity.microsoft.com/t5/microsoft-365-blog/exchange-online-sharepoint-online-and-microsoft-teams-april/ba-p/3741230
Increased Support Requests
The distrust may lead to an increase in support requests as users report certificate validation issues, overwhelming IT support resources.
- roles: IT Support, Help Desk Staff
- references: https://techcommunity.microsoft.com/t5/microsoft-365-blog/exchange-online-sharepoint-online-and-microsoft-teams-april/ba-p/3741230
User Experience Degradation
Users may experience degraded performance and frustration due to unexpected certificate errors, impacting productivity.
- roles: End Users, Project Managers
- references: https://techcommunity.microsoft.com/t5/microsoft-365-blog/exchange-online-sharepoint-online-and-microsoft-teams-april/ba-p/3741230
Legacy System Vulnerability
Organizations relying on legacy systems that still use DigiCert Global Root CA (G1) may face security vulnerabilities and compliance risks.
- roles: System Administrators, Compliance Officers
- references: https://techcommunity.microsoft.com/t5/microsoft-365-blog/exchange-online-sharepoint-online-and-microsoft-teams-april/ba-p/3741230
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
XXXXXXX ... free basic plan only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
Last updated 3 weeks ago ago
