Skip to content

Commit 76c72b9

Browse files
authored
Update migrate-tls-certificate.md
Added instructions on how to initiate the migration in IoT Central
1 parent 0c42a0b commit 76c72b9

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

articles/iot-hub/migrate-tls-certificate.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -159,6 +159,15 @@ No, only the [global Azure cloud](https://azure.microsoft.com/global-infrastruct
159159

160160
Yes, IoT Central uses both IoT Hub and DPS in the backend. The TLS migration will affect your solution, and you need to update your devices to maintain connection.
161161

162+
You can migrate your application from the Baltimore CyberTrust Root to the DigiCert Global G2 Root on your own schedule. We recommend the following process: 
163+
1. **Keep the Baltimore CyberTrust Root on your device until the transition period is completed on 15 February 2024** (necessary to prevent connection interruption).
164+
2. **In addition** to the Baltimore Root, ensure the DigiCert Global G2 Root is added to your trusted root store.
165+
3. Make sure you aren’t pinning any intermediate or leaf certificates and are using the public roots to perform TLS server validation.
166+
4. In your IoT Central application you can find the Root Certification settings under **Settings** > **Application** > **Baltimore Cybertrust Migration**. 
167+
1. Select “**DigiCert Global G2 Root**” to migrate to the new certificate root.
168+
2. Click “**Save**” to initiate the migration.
169+
3. If needed, you can migrate back to the Baltimore root by selecting “**Baltimore CyberTrust Root**“ and saving the changes. This option is available until 15 May 2023 and will then be disabled as Microsoft will start initiating the migration.
170+
162171
### How long will it take my devices to reconnect?
163172

164173
Several factors can affect device reconnection behavior.

0 commit comments

Comments
 (0)