Trust the new DigiCert Certificate Authorities (CAs) for Microsoft Entra

Solution Verified - Updated -

Issue

  • Message from Microsoft indicates that Certificate Authorities (CAs) will be changed.

    Trust the new DigiCert Certificate Authorities (CAs) for Microsoft Entra
    Starting January 7, 2026, Microsoft Entra will migrate its DigiCert certificates from the G1 root CA to the G2 root CA. Clients that pin to the DigiCert G1 root or do not trust the DigiCert G2 root may experience authentication failures.

  • How to add DigiCert Global Root G2 to RHEL hosts?

Environment

  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux 10

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content