can you use a real ssl certificate with vm at a dns like: myvmname.uswest2.cloudapp.azure.com

Question

Hi -- I know very very little about authentication and certs so please feel free to add anything that you think _everyone_knows_. I have a VM running a simple http endpoint app (via powershell) and want to secure it all with https. I purchased a cert for the exact dns name I assigned (for free) which is myvmname.uswest2.cloudapp.azure.com

According to the three step process on azure with the nice friendly checkmarks, I have added it to a keyvault and authenticated (via the http file manual method) and it says it is in "issued" status when I navigate the azure portal to the certificate and look at its overview. However, if I go to the general area called "app service certificates" it shows the status of PendingIssuance. As well, it does not show up in the keyvault when I look at that.
so..

1. Is it even valid for me to try to use a cert that is fully specified as a subdomain of azure.com?
2. Any idea why the cert status is inconsistent?
3. Assuming this is all messed up.. how can I request a delete of that cert as it is useless, refund.. or get it directed to an owned dns name (which I don't have yet)

thanks!

Answer 1

@Dave Roberts
A SSL certificate for this domain will not work since it is owned by Microsoft. Since you host your endpoint on Azure VM, you should purchase a domain then get an SSL certificate for your own domain. The domain and cert can be purchase from Azure or a third party. This blog post walks through how this can be done on Azure.

To cancel the certificate and request a refund I recommend creating a support request to our Billing and Account team.

Hope this helps. Let us know if you have further questions or issues.

-------------------------------

Please don’t forget to "Accept the answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Disclaimer: This response contains a reference to a third-party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there.
There are inherent dangers in the use of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet.