SBC vendor certificate renewal reminders
Overview
Session Border Controllers terminate TLS to Teams Direct Routing or carrier trunks. Expired certs cause weekend outages when automation failed silently.
Inventory
Per SBC: FQDN, issuer, expiry, intermediate chain file version, Teams/cert vendor notification contacts.
Process
- 90/60/30 day PSA tasks with owner; test reload in staging where possible.
- Validate private key custody—HSM vs file—and backup restore drill annually.
Microsoft-side
Confirm Online Voicemail / Gateway pairing still trusts roots; watch for upcoming TLS cipher deprecations in Message Center.
After renewal
Capture openssl s_client or vendor-equivalent verification, archive in change record; schedule monitoring alert 14 days before next expiry.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...