Deploying MS Teams Direct Routing with IP Office

MS Teams Certificates

Last Updated : Apr 08, 2024 |

To support MS Teams, the ASBCE requires the following certificates.

Microsoft Certificates

From Microsoft, the ASBCE requires the following certificates:


Certificate	Description
MS Teams Root Certificate	This is the root certificate used by Microsoft for MS Teams. The certificate and details of the certificate can be obtained from https://cacerts.digicert.com/DigiCertGlobalRootG2.crt. The examples in this document use the certificate name DigiCertGlobalRootG2.crt
ASBCE MS Teams Certificate	The ASBCE uses this certificate for its connection to MS Teams. For details of how to request the certificate, refer to https://docs.microsoft.com/en-us/microsoftteams/direct-routing-plan#public-trusted-certificate-for-the-sbc. The examples in this document use the certificate name MSTeamsSBC.crt.

IP Office Certificates

From the IP Office, the ASBCE requires the following certificates.

If IP Office certificates are already present, for example if the ASBCE is supporting remote IP Office extensions, you can use the existing certificates.


Certificate	Description
IP Office Root Certificate	The IP Office uses this certificate for SIP TLS. If the IP Office root certificate is self-signed, set the Verification depth to 1. If the certificate is from an external verification authority, set the Verification Depth to 2 ( the length of certificate chain). The examples in this document use the certificate is name IPO_RootCA.pem.
IP Office Identity Certificate for the ASBCE	The ASBCE uses this certificate to connect to the IP Office. It can either be an identity certificate for another server generated by the IP Office, or one provided by the same external CA as imported as a trusted certificate. The examples in this document use the certificate name IPO_SBCID.pem.

Send Feedback