UPDATE 3/16/2026: We worked with the partner team to republish the Microsoft 365 Root Certificate Chain Bundles for Worldwide (WWMT) and GCC High / DoD (ITAR) after identifying that the previously pu...
Updated Mar 18, 2026
Version 13.0
Blog Post
6 MIN READ
Trust DigiCert Global Root G2 Certificate Authority to Avoid Exchange Online Email Disruption
Nino_Bilic
Microsoft
MicrosoftThe bundle was updated yesterday; the new version of the bundle contains interim certs.
Ciao Nino_Bilic,
so we have to import the file m365_root_certs_20260316.p7b with this line:
certutil -addstore CA "<PathToP7bFiles>\m365_root_certs_20260316.p7b"
correct?
Would be greate if the article would have a correct how to...
Is this really the way Microsoft want to work with the customers? In an Enterprise Environment with a change process etc. and a lot of other work to do, 6 days to change something is way to short...
Nino_Bilic Please confirm if the bundle mentioned is the correct one.
Downloaded both and I did see one of them is old, but as no matches to info in this blog i imported both.
Also as I wrote i had to open certlm and import manually, the command did not work.
You should check and correct your blog info if what I see is same for all. Maybe because the new bundle contains intermediates then you cannot the certutil command -addstore root as there are not only Root certs in the bundle!??
And confirm that we do only need to "think" of the one from 16/3-26 = m365_root_certs_20260316.p7bAs you specify nothing I did try both via certutil and the one that I guess is newest according to name fails.
[PS] C:\Cert\Microsoft cert bundle>certutil -addstore Root .\m365_root_certs_20260316.p7b
Root "Trusted Root Certification Authorities"
Cannot add a non-root certificate to the root store
CertUtil: -addstore command FAILED: 0x8007000d (WIN32: 13 ERROR_INVALID_DATA)
CertUtil: The data is invalid.
- Nino_Bilic
Please refresh the post; updated today. We now included a script that will import the right cert into the right store from the new bundle download.
Great and thx! Have a nice day and thx for taking this serious, as many admins have so much to do, and not all have a department for every part of their infrastructure at all.
I hope you will consider making it that easy for us admins to use "next" time. Might save time for you and thousands of admins / consultants :-)
