Blog Post

Exchange Team Blog
1 MIN READ

Re: Trust DigiCert Global Root G2 Certificate Authority to Avoid Exchange Online Email Disruption

Pankaj_Messaging_Specialist's avatar
Pankaj_Messaging_Specialist
Iron Contributor
Mar 19, 2026

Nino_Bilic​ Arindam_Thokder​ Please let me know if I dont need to install Intermediate certificate as I see Digicert G2 certificate and cert sync status is also latest. 

I see DigiCert Root G2 certificate, Do I need to install new M365 bundle certificate and use the command to install certificate?

I am seeing these certificates under the "Intermediate certificates" on exchange servers. 

Please advise if we need to install certificate or not, or we are good here as I see latest sync cert as well. 

Published Mar 19, 2026
Version 1.0

2 Comments

  • Nino_Bilic's avatar
    Nino_Bilic
    Icon for Microsoft rankMicrosoft
    Mar 19, 2026

    We already replied to you multiple times and you have stated that you do not block Windows functionality to download certificates etc. (no such policy is in place). Again (and for the last time): this whole thing is only for customers who block native Windows functionality Windows CTL Updater or modified the AIA URL retrieval in Windows OS as per Authority Information Access in Windows | Microsoft Learn.