diff --git a/SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.signatures.json b/SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.signatures.json
index b810fb53199..4256f304098 100644
--- a/SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.signatures.json
+++ b/SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.signatures.json
@@ -1,5 +1,5 @@
 {
   "Signatures": {
-    "SymCrypt-OpenSSL-1.8.1.tar.gz": "292d9eb2e9874abd250aff2715623ccaa1bd51c470a7c5af1bbd7678383372df"
+    "SymCrypt-OpenSSL-1.9.0.tar.gz": "073debf1d12d9d4c683bf4ba6bd78403c9f559244f06b7e1c6de46bd483c0ff3"
   }
 }
diff --git a/SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec b/SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec
index 0d64666d92d..5169d56429d 100644
--- a/SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec
+++ b/SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec
@@ -1,6 +1,6 @@
 Summary:        The SymCrypt engine for OpenSSL (SCOSSL) allows the use of OpenSSL with SymCrypt as the provider for core cryptographic operations
 Name:           SymCrypt-OpenSSL
-Version:        1.8.1
+Version:        1.9.0
 Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
@@ -59,7 +59,14 @@ install SymCryptEngine/inc/e_scossl.h %{buildroot}%{_includedir}/e_scossl.h
 install SymCryptProvider/symcrypt_prov.cnf %{buildroot}%{_sysconfdir}/pki/tls/symcrypt_prov.cnf
 
 %check
-./bin/SslPlay/SslPlay
+# Run in a subshell so the exit code of the test does not affect the main shell's exit code.
+# This is important because the entire section is wrapped in a script by rpmbuild itself.
+# The test is run twice: once with the default provider and once with the SymCrypt provider.
+(
+        set -e
+        ./bin/SslPlay/SslPlay
+        ./bin/SslPlay/SslPlay --provider-path ./bin/SymCryptProvider/ --provider symcryptprovider --no-engine
+)
 
 %files
 %license LICENSE
@@ -80,6 +87,10 @@ install SymCryptProvider/symcrypt_prov.cnf %{buildroot}%{_sysconfdir}/pki/tls/sy
 %dir %attr(1733, root, root) %{_localstatedir}/log/keysinuse/
 
 %changelog
+* Thu May 22 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.9.0-1
+- Auto-upgrade to 1.9.0 - Support digest state exports.
+- Added second test run that forces the use of the SymCrypt provider.
+
 * Tue May 13 2025 Tobias Brick <tobiasb@microsoft.com> - 1.8.1-1
 - Upgrade to SymCrypt-OpenSSL 1.8.1 with minor bugfixes.
 
diff --git a/cgmanifest.json b/cgmanifest.json
index 9f16fb46517..f5152538c40 100644
--- a/cgmanifest.json
+++ b/cgmanifest.json
@@ -28676,8 +28676,8 @@
         "type": "other",
         "other": {
           "name": "SymCrypt-OpenSSL",
-          "version": "1.8.1",
-          "downloadUrl": "https://github.com/microsoft/SymCrypt-OpenSSL/archive/v1.8.1.tar.gz"
+          "version": "1.9.0",
+          "downloadUrl": "https://github.com/microsoft/SymCrypt-OpenSSL/archive/v1.9.0.tar.gz"
         }
       }
     },