Yes, to whom it may concern is supposed to be capitalized, as it’s used at the beginning of formal letters, or other documents instead of the name of the addressed person, so you have to capitalize the first letter of every word of to whom it may concern.
