TLS updates

Author: AbhishekMallick-MS

articles/backup/transport-layer-security.md

@@ -2,7 +2,7 @@
 title: Transport Layer Security in Azure Backup
 description: Learn how to enable Azure Backup to use the encryption protocol Transport Layer Security (TLS) to keep data secure when being transferred over a network.
 ms.topic: conceptual
-ms.date: 11/01/2020
+ms.date: 09/20/2022
 ---
 
 # Transport Layer Security in Azure Backup
@@ -52,6 +52,27 @@ The following registry keys configure .NET Framework to support strong cryptogra
     "SchUseStrongCrypto" = dword:00000001
 ```
 
+## Azure TLS certificate changes\
+
+Azure TLS/SSL endpoints now contains updated certificates chaining up to new root CAs. Ensure that the following changes include the updated root CAs.  [Learn more](../security/fundamentals/tls-certificate-changes.md#what-changed) about the possible impacts on your applications.
+
+Earlier, most of the TLS certificates, used by Azure services, chained up to the following Root CA:
+
+Common name of CA | Thumbprint (SHA1)
+--- | ---
+[Baltimore CyberTrust Root](https://cacerts.digicert.com/BaltimoreCyberTrustRoot.crt) | d4de20d05e66fc53fe1a50882c78db2852cae474
+
+Now, TLS certificates, used by Azure services, helps to chain up to one of the following Root CAs:
+
+Common name of CA | Thumbprint (SHA1)
+--- | ---
+[DigiCert Global Root G2](https://cacerts.digicert.com/DigiCertGlobalRootG2.crt) | df3c24f9bfd666761b268073fe06d1cc8d4f82a4
+[DgiCert Global Root CA](https://cacerts.digicert.com/DigiCertGlobalRootG2.crt) | a8985d3a65e5e5c4b2d7d66d40c6dd2fb19c5436
+[Baltimore CyberTrust Root](https://cacerts.digicert.com/BaltimoreCyberTrustRoot.crt)| d4de20d05e66fc53fe1a50882c78db2852cae474
+[D-TRUST Root Class 3 CA 2 2009](https://www.d-trust.net/cgi-bin/D-TRUST_Root_Class_3_CA_2_2009.crt) | 58e8abb0361533fb80f79b1b6d29d3ff8d5f00f0
+[Microsoft RSA Root Certificate Authority 2017](https://www.microsoft.com/pkiops/certs/Microsoft RSA Root Certificate Authority 2017.crt) | 73a5e64a3bff8316ff0edccc618a906e4eae4d74
+[Microsoft ECC Root Certificate Authority 2017](https://www.microsoft.com/pkiops/certs/Microsoft ECC Root Certificate Authority 2017.crt) | 999a64c37ff47d9fab95f14769891460eec4c3c5
+
 ## Frequently asked questions
 
 ### Why enable TLS 1.2?