Skip to content

Commit 31f3e53

Browse files
Merge pull request #278903 from duongau/patch-2
Azure CDN - Custom SSL - update information about BYOC for Edgio
2 parents 205781b + adc7e70 commit 31f3e53

File tree

1 file changed

+7
-5
lines changed

1 file changed

+7
-5
lines changed

articles/cdn/cdn-custom-ssl.md

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ services: cdn
55
author: duongau
66
ms.service: azure-cdn
77
ms.topic: tutorial
8-
ms.date: 03/20/2024
8+
ms.date: 06/21/2024
99
ms.author: duau
1010
ms.custom: mvc
1111
#Customer intent: As a website owner, I want to enable HTTPS on the custom domain of my CDN endpoint so that my users can use my custom domain to access my content securely.
@@ -95,10 +95,10 @@ To enable HTTPS on a custom domain, follow these steps:
9595
# [Option 2: Enable HTTPS with your own certificate](#tab/option-2-enable-https-with-your-own-certificate)
9696

9797
> [!IMPORTANT]
98-
> * This option is available only with **Azure CDN from Microsoft** and **Azure CDN from Edgio** profiles.
99-
> * The option to use your own certificate with Azure CDN from Edgio will undergo maintenance on June 20, 2024. This feature will be unavailable during this time and will be restored in early 2025.
98+
> * This option is available only with **Azure CDN from Microsoft**.
99+
> * The option to use your own certificate with Azure CDN from Edgio has undergone maintenance on June 20, 2024. This feature will be unavailable during this time and will be available again in early 2025.
100100
101-
You can use your own certificate to enable the HTTPS feature. This process is done through an integration with Azure Key Vault, which allows you to store your certificates securely. Azure CDN uses this secure mechanism to get your certificate and it requires a few extra steps. When you create your TLS/SSL certificate, you must create a complete certificate chain with an allowed certificate authority (CA) that is part of the [Microsoft Trusted CA List](https://ccadb-public.secure.force.com/microsoft/IncludedCACertificateReportForMSFT). If you use a nonallowed CA, your request is rejected. If a certificate without complete chain is presented, requests, which involve that certificate aren't guaranteed to work as expected. For Azure CDN from Edgio, any valid CA is accepted.
101+
You can use your own certificate to enable the HTTPS feature. This process is done through an integration with Azure Key Vault, which allows you to store your certificates securely. Azure CDN uses this secure mechanism to get your certificate and it requires a few extra steps. When you create your TLS/SSL certificate, you must create a complete certificate chain with an allowed certificate authority (CA) that is part of the [Microsoft Trusted CA List](https://ccadb-public.secure.force.com/microsoft/IncludedCACertificateReportForMSFT). If you use a nonallowed CA, your request is rejected. If a certificate without complete chain is presented, requests, which involve that certificate aren't guaranteed to work as expected.
102102

103103
### Prepare your Azure Key Vault account and certificate
104104

@@ -308,7 +308,9 @@ The following table shows the operation progress that occurs when you disable HT
308308

309309
To ensure a newer certificate is deployed to POP infrastructure, upload your new certificate to Azure Key Vault. In your TLS settings on Azure Content Delivery Network, choose the newest certificate version and select save. Azure Content Delivery Network will then propagate your new updated cert.
310310

311-
For **Azure CDN from Edgio** profiles, if you use the same Azure Key Vault certificate on several custom domains (such as a wildcard certificate), ensure you update all of your custom domains that use that same certificate to the newer certificate version.
311+
> [!IMPORTANT]
312+
> * As of June 20, 2024, Azure CDN Standard and Premium from Edgio won't support the **Use my own certificates** feature. This feature will be reintroduced again in early 2025.
313+
> * What are the required actions for custom domains using this feature? BYOC certificates already deployed on the Edgio platform will remain valid until its expiration date. No action is required for certificates expiring in 2025. We encourage you to switch over to *CDN Managed* for certificates requiring an update or will be expiring this year. If you're requiring additional assistance, submit a support request to work with a support engineer.
312314
313315
## Next steps
314316

0 commit comments

Comments
 (0)