Merge pull request #245955 from tomvcassidy/jagilberChanges

Recreating Work from Different PR

Author: American-Dipper

articles/service-fabric/faq-managed-cluster.yml

@@ -102,6 +102,12 @@ sections:
         answer: |
           Yes, you can enable [maintenance control](./how-to-managed-cluster-maintenance-control.md)
 
+      - question: |
+          Why do I get 'Your connection isn't private' when connecting to Service Fabric Explorer (SFX) on a managed cluster?
+        answer: |
+          Connecting to a Service Fabric Explorer (SFX) endpoint on a managed cluster will result in a certificate error 'NET::ERR_CERT_AUTHORITY_INVALID' regardless of certificate being used or cluster configuration. This is because the cluster nodes are using the managed 'cluster' certificate when binding FabricGateway (19000) and FabricHttpGateway (19080) TCP ports and is by design.
+          
+
   - name: Applications
     questions:
       - question: |

articles/service-fabric/how-to-managed-cluster-connect.md

@@ -12,6 +12,10 @@ ms.date: 07/11/2022
 
 Once you have deployed a cluster via [Portal, Azure Resource Managed template](quickstart-managed-cluster-template.md), or [PowerShell](tutorial-managed-cluster-deploy.md) there are various ways to connect to and view your managed cluster. 
 
+Connecting to a Service Fabric Explorer (SFX) endpoint on a managed cluster will result in a certificate error 'NET::ERR_CERT_AUTHORITY_INVALID' regardless of certificate being used or cluster configuration. This is because the cluster nodes are using the managed 'cluster' certificate when binding FabricGateway (19000) and FabricHttpGateway (19080) TCP ports and is by design.
+
+![Screenshot of Service Fabric Explorer certificate error.](media/how-to-managed-cluster-connect/sfx-your-connection-isnt-private.png)
+
 ## Use the Azure portal
 
 To navigate to your managed cluster resource:

articles/service-fabric/media/how-to-managed-cluster-connect/sfx-your-connection-isnt-private.png

@@ -67,6 +67,10 @@ Once the deployment completes, find the Service Fabric Explorer value in the out
 > [!NOTE]
 > You can find the output of the deployment in Azure Portal under the resource group deployments tab.
 
+Connecting to a Service Fabric Explorer (SFX) endpoint on a managed cluster will result in a certificate error 'NET::ERR_CERT_AUTHORITY_INVALID' regardless of certificate being used or cluster configuration. This is because the cluster nodes are using the managed 'cluster' certificate when binding FabricGateway (19000) and FabricHttpGateway (19080) TCP ports and is by design.
+
+![Screenshot of Service Fabric Explorer certificate error.](media/how-to-managed-cluster-connect/sfx-your-connection-isnt-private.png)
+
 ## Clean up resources
 
 When no longer needed, delete the resource group for your Service Fabric managed cluster. To delete the resource group through the portal: