How to set latest on certificate version on Azure CDN http custom endpoint

Krzysztof Madej 26

Here is written:

   In order for the certificate to be automatically rotated to the latest version when a newer version of the certificate is available in your Key Vault, please set the certificate/secret version to 'Latest'. If a specific version is selected, you have to re-select the new version manually for certificate rotation. It takes up to 72 hours for the new version of the certificate/secret to be deployed.

but there is no option like this:

How can I set latest here?

KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2022-11-16T06:13:55.967+00:00
Hi @Krzysztof Madej ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
I understand that you would like to set the KeyVault certificate version to "latest" under CDN's custom domain.

I am not able to reproduce your error. I can see the "Latest" listed under the version.

Can you please make sure you have the appropriate Access policy assigned to the Azure CDN?

May I ask if you have tried to repo this using a Global Admin account?

Or an account/role with "Network Contributor" permissions assigned.

Cheers,
Kapil
Krzysztof Madej 26 Reputation points

2022-11-21T10:02:07.06+00:00

Thank you for replying @KapilAnanth-MSFT

Azure CDN has Get and List on certificates and secrets.
I have a Global Administrator role and I don't see the latest.
I also tried with Network Contributor permission and the result is the same.

Why does your dropdown look different than mine? You don't have groups Current version and `Older versions.

In which region do you test this? My resources are deployed to North Europe.
KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee

2022-11-22T17:52:02.08+00:00

Hi @Krzysztof Madej ,

To further troubleshoot the issue, I think we will need a specialized 1:1 session, where a support engineer can have a screen share session to pinpoint the issue.
If you have a support plan you may file a support ticket, else please do let us know, we will try and help you get a one-time free technical support

Cheers,
Kapil