Acme Packet (MOSC)

MOSC Banner

do I need to create a new cert record if the Extended Key Usage List gets modified due to MS rule

in Acme Packet (MOSC) 2 commentsAnswered ✓

4900 SBC


 key-usage-list                          digitalSignature
                                                keyEncipherment
        extended-key-usage-list                 serverAuth
        key-algor                               rsa
        digest-algor                            sha256
        ecdsa-key-size                          p256
        cert-status-profile-list                
        options                                 


this is the notice from MS


SBC certificates EKU extensions test

On March 5, 2024 (starting 9 AM UTC), Microsoft will conduct a 24-hour test of its infrastructure. During this time, Session Border Controllers (SBCs) certificates are required to include both Client and Server Authentication for their Extended Key Usage (EKU) extensions. We kindly ask that you ensure that the EKU extension of your certificate includes Server Authentication and Client Authentication to avoid any service degradation.

If your SBCs certificate EKU extension doesn't include both Server and Client Authentication, your SBCs will not be able to connect with Microsoft infrastructure.

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center