Understanding the changes in the Root CA change for Azure SQL Database & Azure SQL Managed Instance

FU JIE ZHAO 20 Reputation points
2025-07-28T04:09:53.7966667+00:00

Hi Support,
Ref Link: https://learn.microsoft.com/en-us/azure/azure-sql/updates/ssl-root-certificate-expiring?view=azuresql#frequently-asked-questions

When must Azure Sql be completed? Is there a specific date? Why is there so little information about this news on the Internet? I haven't received any notification. This is what I found out when I looked up the information.


In addition, I noticed that the CA certificate rorate period for Azure Mysql has been updated from 2025-07-31 to 2026-01-01.

Ref Link: https://learn.microsoft.com/en-us/azure/mysql/flexible-server/concepts-root-certificate-rotation

https://docs.azure.cn/en-us/mysql/flexible-server/concepts-root-certificate-rotation

Which document should I refer to?

Azure SQL Database
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Alex Burlachenko 12,695 Reputation points Volunteer Moderator
    2025-07-28T10:43:29.01+00:00

    hi there! thanks for bringing this up ))

    for azure sql database, u need to update the root ca certificate before oct 31, 2025. that's the deadline, so mark it in ur calendar )) microsoft announced it here https://learn.microsoft.com/en-us/azure/azure-sql/updates/ssl-root-certificate-expiring?view=azuresql. yes, the info is a bit scattered, but this doc has all the key details u need.

    aha, and about the azure mysql date change good catch! that's a separate thing. for azure sql, stick to the october date. no extensions here, so better act soon )

    as for notifications, sometimes they get lost in email clutter or service alerts. worth checking ur azure service health dashboard too https://learn.microsoft.com/en-us/azure/service-health/overview. it often has the freshest updates.

    if u use automation scripts or apps connecting to azure sql, test the new cert in a dev environment first. this might help in other tools too, not just sql.

    update client apps/servers to trust the new root cert. check connectors (like jdbc/odbc) some need manual updates. if u use firewall rules with cert validation, double-tweak those.

    the azure sql team has a deep dive here https://learn.microsoft.com/en-us/azure/azure-sql/database/connect-query-content-reference-guide. lifesaver for debugging ))

    even if ur setup works now, stale certs love to break things later. worth looking into ur entire cert chain while u're at it. peace of mind, u know?

    let me know if u need more deets

    Best regards,

    Alex

    and "yes" if you would follow me at Q&A - personaly thx.
    P.S. If my answer help to you, please Accept my answer
    

    https://ctrlaltdel.blog/


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.