Always Encryption Certificate import in Azure App Service

Question

Hi Team,

I am using Always Encrypted concept for one of the columns in table in SQL database. Locally I have created CMK using local certificate and CEK. It works fine on local machine. Now I want to upload this certificate in Azure App Service. I have exported the certificate locally and uploading it to the App Service from TLS/SSL Certificate section. But it gets stuck at 'Validating' phase. There is no error displayed and certificate does not get uploaded.

Is there anything needs to be provided?

Answer 1

Thanks for asking question! If you are looking to upload or import a private certificate to App Service, your certificate must meet the following requirements:

• Exported as a password-protected PFX file
• Contains private key at least 2048 bits long
• Contains all intermediate certificates in the certificate chain

Reference: https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate#private-certificate-requirements

Also note that you should be having admin rights on subscription to upload pfx cert.

Check: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Also, suggest you to access App Service diagnostics ; App Service diagnostics is an intelligent and interactive experience to help you troubleshoot your app with no configuration required.

Navigate to your App Service web app in the Azure portal. In the left navigation, click on Diagnose and solve problems > click on SSL and Domains > select certificate upload operation

You may also refer to this blog on Common errors when uploading certificates to Azure App Service might be helpful.

Please let us know if you have further question on this.

Disclaimer: This response contains a reference to a third-party World Wide Web site. Microsoft is providing this information as a convenience to you