Office TLS certificate changes for custom applications

Date: May 6, 2022
To: InfoTech Listserv
From: EASI Communications
Re: Office TLS certificate changes for custom applications

 

Dear colleagues,

On June 30 Microsoft 365 will update services powering messaging, meetings, telephony, voice and video to use TLS certificates from a different set of Root Certificate Authorities (CAs).

Most IT units will not be impacted by this change. However, Microsoft specifies that custom applications may be impacted when the application explicitly specifies a list of acceptable CAs (i.e uses ‘certificate pinning’). Applications that do not have the new Root CAs in their list of acceptable CAs will receive certificate validation errors. These validation errors may impact the availability or function of custom applications. 

Affected products include Microsoft Teams, Skype, Kaizala and Azure Communication Services. Affected endpoints include: *.teams.microsoft.com *.skype.com *.skypeforbusiness.com *.communication.azure.com and *.operatorconnect.microsoft.com.

How to prepare 

For a full list of the new Root CAs and to determine whether your custom application will be impacted by these TLS certificate changes, please review this article from Microsoft. 

Kind regards, 

EASI Communications 

End of support for Internet Explorer 11 on Windows 10

Date: April 8, 2022
To: InfoTech Listserv
From: Enterprise Applications & Solutions Integration
Re: End of support for Internet Explorer 11 on Windows 10

 

Dear IT colleagues

Please be advised that Microsoft will end support and retire Internet Explorer 11 on June 15, for the following versions of Windows 10:

    • Windows 10 client SKUs (version 20H2 and later)
    • Windows 10 IoT (version 20H2 and later) 

A full list of impacted operating systems can be found here 

In preparation for this change, we recommend you take the following actions: 

End users 

Community members using Internet Explorer 11 on their Windows 10 devices should upgrade to Microsoft Edge or a supported browser such as Chrome as soon as possible. Support for Internet 11 with Microsoft 365 online services previously ended in August 2021. 

IT staff 

If your division has sites or services that rely on legacy document modes or ActiveX controls for third-party apps, Microsoft Edge has Internet Explorer mode built in. Internet Explorer mode enables backward compatibility and will be supported through at least 2029. Please submit a ticket through uoft.me/m365help as soon as possible if you have concerns that your divisional site or service will be impacted by the June 2022 end of service date. 

For additional information, please review this FAQ from Microsoft. 

Kind regards, 

EASI Digital Workplace 

Share Your (Real) Whiteboard: Content From Camera in Teams

Did you know that Teams can automatically frame, resize and increase the contrast on your physical whiteboard so that people in your online meetings can see it better? Teams can even make your body appear transparent so that you never block the content — all you need is your computer’s built-in camera and a whiteboard. Join Connect+Learn for a live demonstration of this feature.

Resources

Teams Updates for Winter 2022

It’s only March and 2022 has already been a busy year for Microsoft Teams. Join Connect+Learn for an overview of some recent changes. Updates discussed will include:

  • New chat functionalities
  • New video display settings
  • Adding a word cloud poll to your Teams meeting
  • Sharing whiteboard content from your computer’s camera
  • And more…

Resources

New guest expiry policy for SharePoint and OneDrive

Date: March 10, 2022
To:
SharePoint and OneDrive owners
From:
EASI Communications
Re: New guest expiry policy for SharePoint and OneDrive

 

To SharePoint and OneDrive owners,

Effective April 2, EASI will launch a new guest expiry policy that will improve security by:

  • Requiring that guests using sharing links re-authenticate with a new verification code every 90 days (this will happen automatically).
  • Prompting SharePoint site administrators and OneDrive owners to review and renew guest access after 180 days or else revoke access.

Who does this policy apply to? 

These policies will only apply to new guests invited after April 2. A guest is an external person (non-U of T email). The guest policy does not apply retroactively to guest users that have pre-existing permissions or access through a sharing link before the guest expiration policy was applied. The expiring access policy does not apply to guest accounts who access content through their membership of a Team.

What should I expect?

Once the policy is enabled, primary SharePoint site collection administrators/OneDrive for Business owners will receive e-mail notifications 2-3 weeks ahead of time informing them about any guests that are set to expire. In addition, a yellow banner will appear on the web versions of OneDrive or SharePoint. As owners/administrators you will be able to:

  • Let access expire automatically on the scheduled date
  • Forcibly remove access immediately
  • Extend access for another 180 days

These email notifications are not spam. Emails will be sent from “SharePoint Online” (no-reply@sharepointonline.com). If you ignore and do not extend access, the guest will lose access on the specified date and a new sharing invitation would need to be issued.

For more details on what to expect, see the following knowledge articles:

Managing Guest Expiry in SharePoint

Managing Guest Expiry in OneDrive for Business

Exceptions 

Exceptions to the policy may be requested only for SharePoint sites with external sharing enabled. Site administrators may request a custom guest expiry window of up to 365 days for their specific site. To request an exception for an existing SharePoint site, please submit a ticket at https://uoft.me/sharepoint-gethelp.

What do I need to do to prepare? 

Review the Enterprise Service Centre knowledge articles above so you know what to expect. If your SharePoint site has external sharing enabled, ensure the primary site admin details are always up to date so that the proper person receives the notifications.

Outlook for Android will require Android 8.0 or above starting May 23, 2022

Beginning May 23, 2022, Outlook for Android will no longer support Android 7.1 or below. Users will need to upgrade their Android operating system to Android 8.0

If you are using Outlook for Android on a phone running an older version of Android, you will no longer be able to update to newer versions of Outlook for Android when this change is implemented.

Please ensure you update your operating system to Android 8.0 or newer.