You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/app-service/faq-configuration-and-management.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,14 +31,14 @@ For answers to common questions about using a custom domain name with your Azure
31
31
To learn how to purchase and set up a custom domain for your App Service web app, see [Buy and configure a custom domain name in App Service](manage-custom-dns-buy-domain.md).
32
32
33
33
34
-
## How do I upload and configure an existing SSL certificate for my web app?
34
+
## How do I upload and configure an existing TLS/SSL certificate for my web app?
35
35
36
-
To learn how to upload and set up an existing custom SSL certificate, see [Add an SSL certificate to your App Service app](configure-ssl-certificate.md).
36
+
To learn how to upload and set up an existing custom TLS/SSL certificate, see [Add a TLS/SSL certificate to your App Service app](configure-ssl-certificate.md).
37
37
38
38
39
-
## How do I purchase and configure a new SSL certificate in Azure for my web app?
39
+
## How do I purchase and configure a new TLS/SSL certificate in Azure for my web app?
40
40
41
-
To learn how to purchase and set up an SSL certificate for your App Service web app, see [Add an SSL certificate to your App Service app](configure-ssl-certificate.md).
41
+
To learn how to purchase and set up a TLS/SSL certificate for your App Service web app, see [Add a TLS/SSL certificate to your App Service app](configure-ssl-certificate.md).
42
42
43
43
44
44
## How do I move Application Insights resources?
@@ -80,7 +80,7 @@ To learn how to get the outbound IP address if your website is hosted in an App
80
80
81
81
## How do I get a reserved or dedicated inbound IP address for my web app?
82
82
83
-
To set up a dedicated or reserved IP address for inbound calls made to your Azure app website, install and configure an IP-based SSL certificate.
83
+
To set up a dedicated or reserved IP address for inbound calls made to your Azure app website, install and configure an IP-based TLS/SSL certificate.
84
84
85
85
Note that to use a dedicated or reserved IP address for inbound calls, your App Service plan must be in a Basic or higher service plan.
Copy file name to clipboardExpand all lines: articles/app-service/troubleshoot-domain-ssl-certificates.md
+12-12Lines changed: 12 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
-
title: Troubleshoot domain and SSL certificates
3
-
description: Find solutions to the common problems that you might encounter when you configure a domain or SSL certificate in Azure App Service.
2
+
title: Troubleshoot domain and TLS/SSL certificates
3
+
description: Find solutions to the common problems that you might encounter when you configure a domain or TLS/SSL certificate in Azure App Service.
4
4
author: genlin
5
5
manager: dcscontentpm
6
6
tags: top-support-issue
@@ -11,9 +11,9 @@ ms.author: genli
11
11
ms.custom: seodec18
12
12
13
13
---
14
-
# Troubleshoot domain and SSL certificate problems in Azure App Service
14
+
# Troubleshoot domain and TLS/SSL certificate problems in Azure App Service
15
15
16
-
This article lists common problems that you might encounter when you configure a domain or SSL certificate for your web apps in Azure App Service. It also describes possible causes and solutions for these problems.
16
+
This article lists common problems that you might encounter when you configure a domain or TLS/SSL certificate for your web apps in Azure App Service. It also describes possible causes and solutions for these problems.
17
17
18
18
If you need more help at any point in this article, you can contact the Azure experts on [the MSDN and Stack Overflow forums](https://azure.microsoft.com/support/forums/). Alternatively, you can file an Azure support incident. Go to the [Azure Support site](https://azure.microsoft.com/support/options/) and select **Get Support**.
19
19
@@ -22,17 +22,17 @@ If you need more help at any point in this article, you can contact the Azure ex
22
22
23
23
## Certificate problems
24
24
25
-
### You can't add an SSL certificate binding to an app
25
+
### You can't add a TLS/SSL certificate binding to an app
26
26
27
27
#### Symptom
28
28
29
-
When you add an SSL binding, you receive the following error message:
29
+
When you add a TLS binding, you receive the following error message:
30
30
31
31
"Failed to add SSL binding. Cannot set certificate for existing VIP because another VIP already uses that certificate."
32
32
33
33
#### Cause
34
34
35
-
This problem can occur if you have multiple IP-based SSL bindings for the same IP address across multiple apps. For example, app A has an IP-based SSL with an old certificate. App B has an IP-based SSL with a new certificate for the same IP address. When you update the app SSL binding with the new certificate, it fails with this error because the same IP address is being used for another app.
35
+
This problem can occur if you have multiple IP-based SSL bindings for the same IP address across multiple apps. For example, app A has an IP-based SSL with an old certificate. App B has an IP-based SSL with a new certificate for the same IP address. When you update the app TLS binding with the new certificate, it fails with this error because the same IP address is being used for another app.
36
36
37
37
#### Solution
38
38
@@ -47,15 +47,15 @@ To fix this problem, use one of the following methods:
47
47
48
48
When you try to delete a certificate, you receive the following error message:
49
49
50
-
"Unable to delete the certificate because it is currently being used in an SSL binding. The SSL binding must be removed before you can delete the certificate."
50
+
"Unable to delete the certificate because it is currently being used in a TLS/SSL binding. The TLS binding must be removed before you can delete the certificate."
51
51
52
52
#### Cause
53
53
54
54
This problem might occur if another app uses the certificate.
55
55
56
56
#### Solution
57
57
58
-
Remove the SSL binding for that certificate from the apps. Then try to delete the certificate. If you still can't delete the certificate, clear the internet browser cache and reopen the Azure portal in a new browser window. Then try to delete the certificate.
58
+
Remove the TLS binding for that certificate from the apps. Then try to delete the certificate. If you still can't delete the certificate, clear the internet browser cache and reopen the Azure portal in a new browser window. Then try to delete the certificate.
59
59
60
60
### You can't purchase an App Service certificate
61
61
@@ -65,7 +65,7 @@ You can't purchase an [Azure App Service certificate](./configure-ssl-certificat
65
65
#### Cause and solution
66
66
This problem can occur for any of the following reasons:
67
67
68
-
- The App Service plan is Free or Shared. These pricing tiers don't support SSL.
68
+
- The App Service plan is Free or Shared. These pricing tiers don't support TLS.
69
69
70
70
**Solution**: Upgrade the App Service plan for app to Standard.
71
71
@@ -161,7 +161,7 @@ If your domain was deleted fewer than seven days ago, the domain has not yet sta
161
161
162
162
## Domain problems
163
163
164
-
### You purchased an SSL certificate for the wrong domain
164
+
### You purchased a TLS/SSL certificate for the wrong domain
165
165
166
166
#### Symptom
167
167
@@ -302,7 +302,7 @@ When you purchase a domain, you are not charged for a period of five days, durin
302
302
303
303
**Can I use the domain in another Azure App Service app in my subscription?**
304
304
305
-
Yes. When you access the Custom Domains and SSL blade in the Azure portal, you see the domains that you have purchased. You can configure your app to use any of those domains.
305
+
Yes. When you access the Custom Domains and TLS blade in the Azure portal, you see the domains that you have purchased. You can configure your app to use any of those domains.
306
306
307
307
**Can I transfer a domain from one subscription to another subscription?**
Copy file name to clipboardExpand all lines: articles/application-gateway/create-gateway-internal-load-balancer-app-service-environment.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,7 +19,7 @@ ms.author: genli
19
19
20
20
# Back-end server certificate is not whitelisted for an application gateway using an Internal Load Balancer with an App Service Environment
21
21
22
-
This article troubleshoots the following issue: A certificate isn't whitelisted when you create an application gateway by using an Internal Load Balancer (ILB) together with an App Service Environment (ASE) at the back end when using end-to-end SSL in Azure.
22
+
This article troubleshoots the following issue: A certificate isn't whitelisted when you create an application gateway by using an Internal Load Balancer (ILB) together with an App Service Environment (ASE) at the back end when using end-to-end TLS in Azure.
23
23
24
24
## Symptoms
25
25
@@ -64,7 +64,7 @@ When you use a fully qualified domain name (FQDN) to access the ILB, the back-en
64
64
65
65
- Clear the **Use for App service** option for the application gateway in case you are using the IP address of the ILB.
66
66
67
-
To reduce overhead, you can upload the ILB certificate in the HTTP settings to make the probe path work. (This step is just for whitelisting. It won't be used for SSL communication.) You can retrieve the ILB certificate by accessing the ILB with its IP address from your browser on HTTPS then exporting the SSL certificate in a Base-64 encoded CER format and uploading the certificate on the respective HTTP settings.
67
+
To reduce overhead, you can upload the ILB certificate in the HTTP settings to make the probe path work. (This step is just for whitelisting. It won't be used for TLS communication.) You can retrieve the ILB certificate by accessing the ILB with its IP address from your browser on HTTPS then exporting the TLS/SSL certificate in a Base-64 encoded CER format and uploading the certificate on the respective HTTP settings.
Copy file name to clipboardExpand all lines: articles/cloud-services/cloud-services-configuration-and-management-faq.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -24,11 +24,11 @@ This article includes frequently asked questions about configuration and managem
24
24
25
25
**Certificates**
26
26
27
-
-[Why is the certificate chain of my Cloud Service SSL certificate incomplete?](#why-is-the-certificate-chain-of-my-cloud-service-ssl-certificate-incomplete)
27
+
-[Why is the certificate chain of my Cloud Service TLS/SSL certificate incomplete?](#why-is-the-certificate-chain-of-my-cloud-service-tlsssl-certificate-incomplete)
28
28
-[What is the purpose of the "Windows Azure Tools Encryption Certificate for Extensions"?](#what-is-the-purpose-of-the-windows-azure-tools-encryption-certificate-for-extensions)
29
29
-[How can I generate a Certificate Signing Request (CSR) without "RDP-ing" in to the instance?](#how-can-i-generate-a-certificate-signing-request-csr-without-rdp-ing-in-to-the-instance)
30
30
-[My Cloud Service Management Certificate is expiring. How to renew it?](#my-cloud-service-management-certificate-is-expiring-how-to-renew-it)
31
-
-[How to automate the installation of main SSL certificate(.pfx) and intermediate certificate(.p7b)?](#how-to-automate-the-installation-of-main-ssl-certificatepfx-and-intermediate-certificatep7b)
31
+
-[How to automate the installation of main TLS/SSL certificate(.pfx) and intermediate certificate(.p7b)?](#how-to-automate-the-installation-of-main-tlsssl-certificatepfx-and-intermediate-certificatep7b)
32
32
-[What is the purpose of the "Microsoft Azure Service Management for MachineKey" certificate?](#what-is-the-purpose-of-the-microsoft-azure-service-management-for-machinekey-certificate)
33
33
34
34
**Monitoring and logging**
@@ -69,7 +69,7 @@ This article includes frequently asked questions about configuration and managem
69
69
70
70
## Certificates
71
71
72
-
### Why is the certificate chain of my Cloud Service SSL certificate incomplete?
72
+
### Why is the certificate chain of my Cloud Service TLS/SSL certificate incomplete?
73
73
74
74
We recommend that customers install the full certificate chain (leaf cert, intermediate certs, and root cert) instead of just the leaf certificate. When you install just the leaf certificate, you rely on Windows to build the certificate chain by walking the CTL. If intermittent network or DNS issues occur in Azure or Windows Update when Windows is trying to validate the certificate, the certificate may be considered invalid. By installing the full certificate chain, this problem can be avoided. The blog at [How to install a chained SSL certificate](https://blogs.msdn.microsoft.com/azuredevsupport/2010/02/24/how-to-install-a-chained-ssl-certificate/) shows how to do this.
75
75
@@ -97,7 +97,7 @@ You can use following PowerShell commands to renew your Management Certificates:
97
97
98
98
The **Get-AzurePublishSettingsFile** will create a new management certificate in **Subscription** > **Management Certificates** in the Azure portal. The name of the new certificate looks like "YourSubscriptionNam]-[CurrentDate]-credentials".
99
99
100
-
### How to automate the installation of main SSL certificate(.pfx) and intermediate certificate(.p7b)?
100
+
### How to automate the installation of main TLS/SSL certificate(.pfx) and intermediate certificate(.p7b)?
101
101
102
102
You can automate this task by using a startup script (batch/cmd/PowerShell) and register that startup script in the service definition file. Add both the startup script and certificate(.p7b file) in the project folder of the same directory of the startup script.
Copy file name to clipboardExpand all lines: articles/storage/common/storage-migration-faq.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -296,7 +296,7 @@ To give other people access to the storage resources:
296
296
297
297
**How do I use an HTTPS custom domain with my storage account? For example, how do I make "https:\//mystorageaccountname.blob.core.windows.net/images/image.gif" appear as "https:\//www.contoso.com/images/image.gif"?**
298
298
299
-
SSL is not currently supported on storage accounts with custom domains.
299
+
TLS/SSL is not currently supported on storage accounts with custom domains.
300
300
But you can use non-HTTPS custom domains. For more information,
301
301
see [Configure a custom domain name for your Blob storage endpoint](../blobs/storage-custom-domain-name.md).
0 commit comments