You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/app-service/configure-ssl-app-service-certificate.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,7 +13,7 @@ author: msangapu-msft
13
13
14
14
# Buy and manage App Service certificates
15
15
16
-
This article shows how to create an Azure App Service certificate and perform management tasks like renewing, synchronizing, and deleting certificates. After you have an App Service certificate, you can then import it into an App Service app. An App Service certificate is a private certificate that Azure manages. It combines the simplicity of automated certificate management and the flexibility of renewal and export options.
16
+
This article shows you how to create an Azure App Service certificate and perform management tasks like renewing, synchronizing, and deleting certificates. After you have an App Service certificate, you can then import it into an App Service app. An App Service certificate is a private certificate that Azure manages. It combines the simplicity of automated certificate management and the flexibility of renewal and export options.
17
17
18
18
If you purchase an App Service certificate from Azure, Azure manages the following tasks:
19
19
@@ -53,7 +53,7 @@ Currently, App Service certificates aren't supported in Azure national clouds.
53
53
|**Certificate name**| The friendly name for your App Service certificate. |
54
54
|**Enable auto renewal**| Select whether to automatically renew the certificate before expiration. Each renewal extends the certificate expiration by one year. The cost is charged to your subscription. |
55
55
56
-
1.When deployment is finished, select **Go to resource**.
56
+
1.After the deployment is finished, select **Go to resource**.
57
57
58
58
#### Store the certificate in Azure Key Vault
59
59
@@ -63,7 +63,7 @@ Currently, App Service certificates aren't supported in Azure national clouds.
63
63
64
64
:::image type="content" source="media/configure-ssl-certificate/configure-key-vault.png" alt-text="Screenshot that shows the Certificate Configuration pane with Step 1: Store selected.":::
65
65
66
-
1. On the **Key Vault Status** page, select**Select from Key Vault**.
66
+
1. On the **Key Vault Status** page, choose**Select from Key Vault**.
67
67
68
68
1. If you create a new vault, set up the vault based on the following table. Make sure to use the same subscription and resource group as your App Service app.
The downloaded .pfx file is a raw PKCS12 file that contains both the public and private certificates and has an import password that's an empty string. You can locally install the file by leaving the password field empty. You can't [upload the file as-is into App Service](configure-ssl-certificate.md#upload-a-private-certificate) because the file isn't [password protected](configure-ssl-certificate.md#private-certificate-requirements).
209
+
The downloaded .pfx file is a raw PKCS12 file that contains both the public and private certificates and has an import password that's an empty string. You can locally install the file by leaving the password field empty. You can't [upload the file as it is into App Service](configure-ssl-certificate.md#upload-a-private-certificate) because the file isn't [password protected](configure-ssl-certificate.md#private-certificate-requirements).
210
210
211
211
## Use Azure Advisor for App Service certificates
212
212
@@ -220,7 +220,7 @@ To view Advisor recommendations for the App Service certificate:
220
220
221
221
1. On the left pane, select **Recommendations** > **Reliability**.
222
222
223
-
1. Select the filter option **Type equals** and search for **App Service Certificates**from the dropdown list. If the value doesn't exist on the dropdown menu, that means no recommendation was generated for your App Service certificate resources because none of them requires domain ownership verification.
223
+
1. Select the filter option **Type equals** and search for **App Service Certificates**in the dropdown list. If the value doesn't exist in the dropdown list, that means no recommendation was generated for your App Service certificate resources because none of them requires domain ownership verification.
Copy file name to clipboardExpand all lines: articles/app-service/configure-ssl-bindings.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -46,9 +46,9 @@ In the <a href="https://portal.azure.com" target="_blank">Azure portal</a>:
46
46
1. In **TLS/SSL type**, select either **SNI SSL** or **IP based SSL**:
47
47
48
48
-[SNI SSL](https://en.wikipedia.org/wiki/Server_Name_Indication): You can add multiple Server Name Indication (SNI) Secure Sockets Layer (SSL) bindings. This option allows multiple Transport Layer Security (TLS)/SSL certificates to help secure multiple domains on the same IP address. Most modern browsers (including Microsoft Edge, Chrome, Firefox, and Opera) support SNI. (For more information, see [Server Name Indication](https://wikipedia.org/wiki/Server_Name_Indication).)
49
-
-**IP based SSL**: You can add only one IP SSL binding. This option allows only one TLS/SSL certificate to help secure a dedicated public IP address. After you configure the binding, follow the steps in [Remap records for IP-based SSL](#remap-records-for-ip-based-ssl).<br/>IP-based SSL is supported only in the Standard tier or higher.
49
+
-**IP based SSL**: You can add only one IP SSL binding. This option allows only one TLS/SSL certificate to help secure a dedicated public IP address. After you configure the binding, follow the steps in [Remap records for IP-based SSL](#remap-records-for-ip-based-ssl).IP-based SSL is supported only in the Standard tier or higher.
50
50
51
-
1. When you add a new certificate, validate the new certificate by selecting **Validate**.
51
+
1. When you add a new certificate, select **Validate** to validate the new certificate.
52
52
53
53
1. Select **Add**.
54
54
@@ -86,7 +86,7 @@ If your app gives you certificate validation errors, you're probably using a sel
86
86
87
87
#### How do I make sure that the app's IP address doesn't change when I make changes to the certificate binding?
88
88
89
-
Your inbound IP address can change when you delete a binding, even if that binding is IP SSL. This behavior is especially important when you renew a certificate that's already in an IP SSL binding. To avoid a change in your app's IP address, follow these steps, in order:
89
+
Your inbound IP address can change when you delete a binding, even if that binding is IP SSL. This behavior is especially important when you renew a certificate that's already in an IP SSL binding. To avoid a change in your app's IP address, follow these steps:
90
90
91
91
1. Upload the new certificate.
92
92
1. Bind the new certificate to the custom domain that you want without deleting the old one. This action replaces the binding instead of removing the old one.
Copy file name to clipboardExpand all lines: articles/app-service/configure-ssl-certificate-in-code.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,7 +14,7 @@ author: msangapu-msft
14
14
15
15
In your application code, you can access the [public or private certificates that you add to Azure App Service](configure-ssl-certificate.md). Your app code might act as a client and access an external service that requires certificate authentication. It might also need to perform cryptographic tasks. This article shows how to use public or private certificates in your application code.
16
16
17
-
This approach to using certificates in your code makes use of the Transport Layer Security (TLS) functionality in App Service, which requires your app to be in the Basic tier or higher. If your app is in the Free or Shared tier, you can [include the certificate file in your app repository](#load-certificate-from-file).
17
+
This approach to using certificates in your code makes use of the Transport Layer Security (TLS) functionality in App Service, which requires your app to be in the Basic tier or higher. If your app is in the Free or Shared tier, you can [include the certificate file in your app repository](#load-a-certificate-from-a-file).
18
18
19
19
When you let App Service manage your TLS/Secure Sockets Layer (SSL) certificates, you can maintain the certificates and your application code separately and safeguard your sensitive data.
0 commit comments