Skip to content

Commit ad0b90f

Browse files
authored
Merge pull request #108984 from TimShererWithAquent/us1679050ak
Change SSL to TLS per 1679050
2 parents dd3090c + 7fcaf99 commit ad0b90f

File tree

5 files changed

+24
-24
lines changed

5 files changed

+24
-24
lines changed

articles/app-service/faq-configuration-and-management.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -31,14 +31,14 @@ For answers to common questions about using a custom domain name with your Azure
3131
To learn how to purchase and set up a custom domain for your App Service web app, see [Buy and configure a custom domain name in App Service](manage-custom-dns-buy-domain.md).
3232

3333

34-
## How do I upload and configure an existing SSL certificate for my web app?
34+
## How do I upload and configure an existing TLS/SSL certificate for my web app?
3535

36-
To learn how to upload and set up an existing custom SSL certificate, see [Add an SSL certificate to your App Service app](configure-ssl-certificate.md).
36+
To learn how to upload and set up an existing custom TLS/SSL certificate, see [Add a TLS/SSL certificate to your App Service app](configure-ssl-certificate.md).
3737

3838

39-
## How do I purchase and configure a new SSL certificate in Azure for my web app?
39+
## How do I purchase and configure a new TLS/SSL certificate in Azure for my web app?
4040

41-
To learn how to purchase and set up an SSL certificate for your App Service web app, see [Add an SSL certificate to your App Service app](configure-ssl-certificate.md).
41+
To learn how to purchase and set up a TLS/SSL certificate for your App Service web app, see [Add a TLS/SSL certificate to your App Service app](configure-ssl-certificate.md).
4242

4343

4444
## How do I move Application Insights resources?
@@ -80,7 +80,7 @@ To learn how to get the outbound IP address if your website is hosted in an App
8080

8181
## How do I get a reserved or dedicated inbound IP address for my web app?
8282

83-
To set up a dedicated or reserved IP address for inbound calls made to your Azure app website, install and configure an IP-based SSL certificate.
83+
To set up a dedicated or reserved IP address for inbound calls made to your Azure app website, install and configure an IP-based TLS/SSL certificate.
8484

8585
Note that to use a dedicated or reserved IP address for inbound calls, your App Service plan must be in a Basic or higher service plan.
8686

articles/app-service/troubleshoot-domain-ssl-certificates.md

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Troubleshoot domain and SSL certificates
3-
description: Find solutions to the common problems that you might encounter when you configure a domain or SSL certificate in Azure App Service.
2+
title: Troubleshoot domain and TLS/SSL certificates
3+
description: Find solutions to the common problems that you might encounter when you configure a domain or TLS/SSL certificate in Azure App Service.
44
author: genlin
55
manager: dcscontentpm
66
tags: top-support-issue
@@ -11,9 +11,9 @@ ms.author: genli
1111
ms.custom: seodec18
1212

1313
---
14-
# Troubleshoot domain and SSL certificate problems in Azure App Service
14+
# Troubleshoot domain and TLS/SSL certificate problems in Azure App Service
1515

16-
This article lists common problems that you might encounter when you configure a domain or SSL certificate for your web apps in Azure App Service. It also describes possible causes and solutions for these problems.
16+
This article lists common problems that you might encounter when you configure a domain or TLS/SSL certificate for your web apps in Azure App Service. It also describes possible causes and solutions for these problems.
1717

1818
If you need more help at any point in this article, you can contact the Azure experts on [the MSDN and Stack Overflow forums](https://azure.microsoft.com/support/forums/). Alternatively, you can file an Azure support incident. Go to the [Azure Support site](https://azure.microsoft.com/support/options/) and select **Get Support**.
1919

@@ -22,17 +22,17 @@ If you need more help at any point in this article, you can contact the Azure ex
2222

2323
## Certificate problems
2424

25-
### You can't add an SSL certificate binding to an app
25+
### You can't add a TLS/SSL certificate binding to an app
2626

2727
#### Symptom
2828

29-
When you add an SSL binding, you receive the following error message:
29+
When you add a TLS binding, you receive the following error message:
3030

3131
"Failed to add SSL binding. Cannot set certificate for existing VIP because another VIP already uses that certificate."
3232

3333
#### Cause
3434

35-
This problem can occur if you have multiple IP-based SSL bindings for the same IP address across multiple apps. For example, app A has an IP-based SSL with an old certificate. App B has an IP-based SSL with a new certificate for the same IP address. When you update the app SSL binding with the new certificate, it fails with this error because the same IP address is being used for another app.
35+
This problem can occur if you have multiple IP-based SSL bindings for the same IP address across multiple apps. For example, app A has an IP-based SSL with an old certificate. App B has an IP-based SSL with a new certificate for the same IP address. When you update the app TLS binding with the new certificate, it fails with this error because the same IP address is being used for another app.
3636

3737
#### Solution
3838

@@ -47,15 +47,15 @@ To fix this problem, use one of the following methods:
4747

4848
When you try to delete a certificate, you receive the following error message:
4949

50-
"Unable to delete the certificate because it is currently being used in an SSL binding. The SSL binding must be removed before you can delete the certificate."
50+
"Unable to delete the certificate because it is currently being used in a TLS/SSL binding. The TLS binding must be removed before you can delete the certificate."
5151

5252
#### Cause
5353

5454
This problem might occur if another app uses the certificate.
5555

5656
#### Solution
5757

58-
Remove the SSL binding for that certificate from the apps. Then try to delete the certificate. If you still can't delete the certificate, clear the internet browser cache and reopen the Azure portal in a new browser window. Then try to delete the certificate.
58+
Remove the TLS binding for that certificate from the apps. Then try to delete the certificate. If you still can't delete the certificate, clear the internet browser cache and reopen the Azure portal in a new browser window. Then try to delete the certificate.
5959

6060
### You can't purchase an App Service certificate
6161

@@ -65,7 +65,7 @@ You can't purchase an [Azure App Service certificate](./configure-ssl-certificat
6565
#### Cause and solution
6666
This problem can occur for any of the following reasons:
6767

68-
- The App Service plan is Free or Shared. These pricing tiers don't support SSL.
68+
- The App Service plan is Free or Shared. These pricing tiers don't support TLS.
6969

7070
**Solution**: Upgrade the App Service plan for app to Standard.
7171

@@ -161,7 +161,7 @@ If your domain was deleted fewer than seven days ago, the domain has not yet sta
161161

162162
## Domain problems
163163

164-
### You purchased an SSL certificate for the wrong domain
164+
### You purchased a TLS/SSL certificate for the wrong domain
165165

166166
#### Symptom
167167

@@ -302,7 +302,7 @@ When you purchase a domain, you are not charged for a period of five days, durin
302302

303303
**Can I use the domain in another Azure App Service app in my subscription?**
304304

305-
Yes. When you access the Custom Domains and SSL blade in the Azure portal, you see the domains that you have purchased. You can configure your app to use any of those domains.
305+
Yes. When you access the Custom Domains and TLS blade in the Azure portal, you see the domains that you have purchased. You can configure your app to use any of those domains.
306306

307307
**Can I transfer a domain from one subscription to another subscription?**
308308

articles/application-gateway/create-gateway-internal-load-balancer-app-service-environment.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ ms.author: genli
1919

2020
# Back-end server certificate is not whitelisted for an application gateway using an Internal Load Balancer with an App Service Environment
2121

22-
This article troubleshoots the following issue: A certificate isn't whitelisted when you create an application gateway by using an Internal Load Balancer (ILB) together with an App Service Environment (ASE) at the back end when using end-to-end SSL in Azure.
22+
This article troubleshoots the following issue: A certificate isn't whitelisted when you create an application gateway by using an Internal Load Balancer (ILB) together with an App Service Environment (ASE) at the back end when using end-to-end TLS in Azure.
2323

2424
## Symptoms
2525

@@ -64,7 +64,7 @@ When you use a fully qualified domain name (FQDN) to access the ILB, the back-en
6464

6565
- Clear the **Use for App service** option for the application gateway in case you are using the IP address of the ILB.
6666

67-
To reduce overhead, you can upload the ILB certificate in the HTTP settings to make the probe path work. (This step is just for whitelisting. It won't be used for SSL communication.) You can retrieve the ILB certificate by accessing the ILB with its IP address from your browser on HTTPS then exporting the SSL certificate in a Base-64 encoded CER format and uploading the certificate on the respective HTTP settings.
67+
To reduce overhead, you can upload the ILB certificate in the HTTP settings to make the probe path work. (This step is just for whitelisting. It won't be used for TLS communication.) You can retrieve the ILB certificate by accessing the ILB with its IP address from your browser on HTTPS then exporting the TLS/SSL certificate in a Base-64 encoded CER format and uploading the certificate on the respective HTTP settings.
6868

6969
## Need help? Contact support
7070

articles/cloud-services/cloud-services-configuration-and-management-faq.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,11 +24,11 @@ This article includes frequently asked questions about configuration and managem
2424

2525
**Certificates**
2626

27-
- [Why is the certificate chain of my Cloud Service SSL certificate incomplete?](#why-is-the-certificate-chain-of-my-cloud-service-ssl-certificate-incomplete)
27+
- [Why is the certificate chain of my Cloud Service TLS/SSL certificate incomplete?](#why-is-the-certificate-chain-of-my-cloud-service-tlsssl-certificate-incomplete)
2828
- [What is the purpose of the "Windows Azure Tools Encryption Certificate for Extensions"?](#what-is-the-purpose-of-the-windows-azure-tools-encryption-certificate-for-extensions)
2929
- [How can I generate a Certificate Signing Request (CSR) without "RDP-ing" in to the instance?](#how-can-i-generate-a-certificate-signing-request-csr-without-rdp-ing-in-to-the-instance)
3030
- [My Cloud Service Management Certificate is expiring. How to renew it?](#my-cloud-service-management-certificate-is-expiring-how-to-renew-it)
31-
- [How to automate the installation of main SSL certificate(.pfx) and intermediate certificate(.p7b)?](#how-to-automate-the-installation-of-main-ssl-certificatepfx-and-intermediate-certificatep7b)
31+
- [How to automate the installation of main TLS/SSL certificate(.pfx) and intermediate certificate(.p7b)?](#how-to-automate-the-installation-of-main-tlsssl-certificatepfx-and-intermediate-certificatep7b)
3232
- [What is the purpose of the "Microsoft Azure Service Management for MachineKey" certificate?](#what-is-the-purpose-of-the-microsoft-azure-service-management-for-machinekey-certificate)
3333

3434
**Monitoring and logging**
@@ -69,7 +69,7 @@ This article includes frequently asked questions about configuration and managem
6969

7070
## Certificates
7171

72-
### Why is the certificate chain of my Cloud Service SSL certificate incomplete?
72+
### Why is the certificate chain of my Cloud Service TLS/SSL certificate incomplete?
7373

7474
We recommend that customers install the full certificate chain (leaf cert, intermediate certs, and root cert) instead of just the leaf certificate. When you install just the leaf certificate, you rely on Windows to build the certificate chain by walking the CTL. If intermittent network or DNS issues occur in Azure or Windows Update when Windows is trying to validate the certificate, the certificate may be considered invalid. By installing the full certificate chain, this problem can be avoided. The blog at [How to install a chained SSL certificate](https://blogs.msdn.microsoft.com/azuredevsupport/2010/02/24/how-to-install-a-chained-ssl-certificate/) shows how to do this.
7575

@@ -97,7 +97,7 @@ You can use following PowerShell commands to renew your Management Certificates:
9797

9898
The **Get-AzurePublishSettingsFile** will create a new management certificate in **Subscription** > **Management Certificates** in the Azure portal. The name of the new certificate looks like "YourSubscriptionNam]-[CurrentDate]-credentials".
9999

100-
### How to automate the installation of main SSL certificate(.pfx) and intermediate certificate(.p7b)?
100+
### How to automate the installation of main TLS/SSL certificate(.pfx) and intermediate certificate(.p7b)?
101101

102102
You can automate this task by using a startup script (batch/cmd/PowerShell) and register that startup script in the service definition file. Add both the startup script and certificate(.p7b file) in the project folder of the same directory of the startup script.
103103

articles/storage/common/storage-migration-faq.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -296,7 +296,7 @@ To give other people access to the storage resources:
296296
297297
**How do I use an HTTPS custom domain with my storage account? For example, how do I make "https:\//mystorageaccountname.blob.core.windows.net/images/image.gif" appear as "https:\//www.contoso.com/images/image.gif"?**
298298
299-
SSL is not currently supported on storage accounts with custom domains.
299+
TLS/SSL is not currently supported on storage accounts with custom domains.
300300
But you can use non-HTTPS custom domains. For more information,
301301
see [Configure a custom domain name for your Blob storage endpoint](../blobs/storage-custom-domain-name.md).
302302

0 commit comments

Comments
 (0)