Skip to content

Commit c536cc1

Browse files
committed
made minor edits and fixed outdated information
1 parent 357001c commit c536cc1

File tree

1 file changed

+13
-12
lines changed

1 file changed

+13
-12
lines changed

articles/application-gateway/mutual-authentication-powershell.md

Lines changed: 13 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -12,17 +12,18 @@ ms.custom: devx-track-azurepowershell
1212
---
1313

1414
# Configure mutual authentication with Application Gateway through PowerShell
15-
This article describes how to use the PowerShell to configure mutual authentication on your Application Gateway. Mutual authentication means Application Gateway authenticates the client sending the request using the client certificate you upload onto the Application Gateway.
15+
This article describes how to use PowerShell to configure mutual authentication on your Application Gateway. Mutual authentication means Application Gateway authenticates the client sending the request using the client certificate you upload onto the Application Gateway.
1616

1717
If you don't have an Azure subscription, create a [free account](https://azure.microsoft.com/free/?WT.mc_id=A261C142F) before you begin.
1818

19-
[!INCLUDE [updated-for-az](~/reusable-content/ce-skilling/azure/includes/updated-for-az.md)]
19+
> [!NOTE]
20+
> We recommend that you use the Azure Az PowerShell module to interact with Azure. To get started, see [Install Azure PowerShell](/powershell/azure/install-azure-powershell). To learn how to migrate to the Az PowerShell module, see [Migrate Azure PowerShell from AzureRM to Az](/powershell/azure/migrate-from-azurerm-to-az).
2021
21-
This article requires the Azure PowerShell module version 1.0.0 or later. Run `Get-Module -ListAvailable Az` to find the version. If you need to upgrade, see [Install Azure PowerShell module](/powershell/azure/install-azure-powershell). If you're running PowerShell locally, you also need to run `Login-AzAccount` to create a connection with Azure.
22+
This article requires the Azure PowerShell module version 1.0.0 or later. Run `Get-Module -ListAvailable Az` to find the version. If you need to upgrade, see [Install Azure PowerShell module](/powershell/azure/install-azure-powershell). If you're running PowerShell locally, you also need to run `Connect-AzAccount` to create a connection with Azure.
2223

2324
## Before you begin
2425

25-
To configure mutual authentication with an Application Gateway, you need a client certificate to upload to the gateway. The client certificate will be used to validate the certificate the client will present to Application Gateway. For testing purposes, you can use a self-signed certificate. However, this is not advised for production workloads, because they're harder to manage and aren't completely secure.
26+
To configure mutual authentication with an Application Gateway, you need a client certificate to upload to the gateway. The client certificate is used to validate the certificate the client presents to Application Gateway. For testing purposes, you can use a self-signed certificate. However, this is not advised for production workloads, because they're harder to manage and aren't completely secure.
2627

2728
To learn more, especially about what kind of client certificates you can upload, see [Overview of mutual authentication with Application Gateway](./mutual-authentication-overview.md#certificates-supported-for-mutual-authentication).
2829

@@ -62,9 +63,9 @@ $fipconfig = New-AzApplicationGatewayFrontendIPConfig -Name $fipconfigName -Publ
6263
$port = New-AzApplicationGatewayFrontendPort -Name $frontendPortName -Port 443
6364
```
6465

65-
## Configure frontend SSL
66+
## Configure frontend TLS/SSL
6667

67-
Configure the SSL certificates for your Application Gateway.
68+
Configure the TLS/SSL certificates for your Application Gateway.
6869

6970
```azurepowershell
7071
$password = ConvertTo-SecureString "P@ssw0rd" -AsPlainText -Force
@@ -77,10 +78,10 @@ $sslCert = New-AzApplicationGatewaySslCertificate -Name $sslCertName -Certificat
7778
Configure client authentication on your Application Gateway. For more information on how to extract trusted client CA certificate chains to use here, see [how to extract trusted client CA certificate chains](./mutual-authentication-certificate-management.md).
7879

7980
> [!IMPORTANT]
80-
> Please ensure that you upload the entire client CA certificate chain in one file, and only one chain per file.
81+
> Ensure that you upload the entire client CA certificate chain in one file, and only one chain per file. The maximum size of each uploaded file must be 25 KB or less.
8182
8283
> [!NOTE]
83-
> We recommend using TLS 1.2 with mutual authentication as TLS 1.2 will be mandated in the future.
84+
> We recommend using TLS 1.2 with mutual authentication as TLS 1.2 will be mandated starting August 31, 2025.
8485
8586
```azurepowershell
8687
$clientCertFilePath = $basedir + "/ScenarioTests/Data/TrustedClientCertificate.cer"
@@ -93,7 +94,7 @@ $listener = New-AzApplicationGatewayHttpListener -Name $listenerName -Protocol H
9394

9495
## Configure the backend pool and settings
9596

96-
Set up backend pool and settings for your Application Gateway. Optionally, set up the backend trusted root certificate for end-to-end SSL encryption.
97+
Set up backend pool and settings for your Application Gateway. Optionally, set up the backend trusted root certificate for end-to-end TLS/SSL encryption.
9798

9899
```azurepowershell
99100
$certFilePath = $basedir + "/ScenarioTests/Data/ApplicationGatewayAuthCert.cer"
@@ -110,17 +111,17 @@ Set up a rule on your Application Gateway.
110111
$rule = New-AzApplicationGatewayRequestRoutingRule -Name $ruleName -RuleType basic -BackendHttpSettings $poolSetting -HttpListener $listener -BackendAddressPool $pool
111112
```
112113

113-
## Set up default SSL policy for future listeners
114+
## Set up default TLS/SSL policy for future listeners
114115

115-
You've set up a listener specific SSL policy while setting up mutual authentication. In this step, you can optionally set the default SSL policy for future listeners you create.
116+
You've set up a listener specific TLS/SSL policy while setting up mutual authentication. In this step, you can optionally set the default TLS/SSL policy for future listeners you create.
116117

117118
```azurepowershell
118119
$sslPolicyGlobal = New-AzApplicationGatewaySslPolicy -PolicyType Predefined -PolicyName "AppGwSslPolicy20170401"
119120
```
120121

121122
## Create the Application Gateway
122123

123-
Using everything we created above, deploy your Application Gateway.
124+
Using everything we created, deploy your Application Gateway.
124125

125126
```azurepowershell
126127
$sku = New-AzApplicationGatewaySku -Name Standard_v2 -Tier Standard_v2

0 commit comments

Comments
 (0)