az functionapp config ssl

Configure SSL certificates.

Commands

Name	Description	Type	Status
az functionapp config ssl bind	Bind an SSL certificate to a function app.	Core	GA
az functionapp config ssl create	Create a Managed Certificate for a hostname in a function app.	Core	Preview
az functionapp config ssl delete	Delete an SSL certificate from a function app.	Core	GA
az functionapp config ssl import	Import an SSL certificate to a function app from Key Vault.	Core	GA
az functionapp config ssl list	List SSL certificates for a function app.	Core	GA
az functionapp config ssl show	Show the details of an SSL certificate for a function app.	Core	GA
az functionapp config ssl unbind	Unbind an SSL certificate from a function app.	Core	GA
az functionapp config ssl upload	Upload an SSL certificate to a function app.	Core	GA

az functionapp config ssl bind

Bind an SSL certificate to a function app.

az functionapp config ssl bind --certificate-thumbprint
                               --ssl-type {IP, SNI}
                               [--hostname]
                               [--ids]
                               [--name]
                               [--resource-group]
                               [--slot]
                               [--subscription]

Examples

Bind an SSL certificate to a function app. (autogenerated)

az functionapp config ssl bind --certificate-thumbprint {certificate-thumbprint} --name MyFunctionApp --resource-group MyResourceGroup --ssl-type SNI

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

--ssl-type

The ssl cert type.

Accepted values: IP, SNI

Optional Parameters

--hostname

The custom domain name. If empty, hostnames will be selected automatically.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the function app.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc

Default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az functionapp config ssl create

Preview

This command is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Create a Managed Certificate for a hostname in a function app.

az functionapp config ssl create --hostname
                                 --name
                                 --resource-group
                                 [--certificate-name]
                                 [--slot]

Examples

Create a Managed Certificate for cname.mycustomdomain.com.

az functionapp config ssl create --resource-group MyResourceGroup --name MyWebapp --hostname cname.mycustomdomain.com

Required Parameters

--hostname

The custom domain name.

--name -n

Name of the web app.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--certificate-name

The name of the certificate.

--slot -s

The name of the slot. Default to the productions slot if not specified.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc

Default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az functionapp config ssl delete

Delete an SSL certificate from a function app.

az functionapp config ssl delete --certificate-thumbprint
                                 --resource-group

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc

Default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az functionapp config ssl import

Import an SSL certificate to a function app from Key Vault.

az functionapp config ssl import --key-vault
                                 --key-vault-certificate-name
                                 [--certificate-name]
                                 [--ids]
                                 [--name]
                                 [--resource-group]
                                 [--subscription]

Examples

Import an SSL certificate to a function app from Key Vault.

az functionapp config ssl import --resource-group MyResourceGroup --name MyFunctionApp --key-vault MyKeyVault --key-vault-certificate-name MyCertificateName

Import an SSL certificate to a function app from Key Vault using resource id (typically if Key Vault is in another subscription).

az functionapp config ssl import --resource-group MyResourceGroup --name MyFunctionApp --key-vault '/subscriptions/[sub id]/resourceGroups/[rg]/providers/Microsoft.KeyVault/vaults/[vault name]' --key-vault-certificate-name MyCertificateName

Required Parameters

--key-vault

The name or resource ID of the Key Vault.

--key-vault-certificate-name

The name of the certificate in Key Vault.

Optional Parameters

--certificate-name

The name of the certificate.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the web app. This is used to set the location of the webspace for the certificate import. If not specified, the location of the resource group will be used. If you have apps in multiple regions/webspaces, you must specify the name of the app to set the location of the webspace for the certificate import.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc

Default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az functionapp config ssl list

List SSL certificates for a function app.

az functionapp config ssl list --resource-group

Examples

List SSL certificates for a function app. (autogenerated)

az functionapp config ssl list --resource-group MyResourceGroup

Required Parameters

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc

Default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az functionapp config ssl show

Show the details of an SSL certificate for a function app.

az functionapp config ssl show --certificate-name
                               --resource-group

Examples

Show the details of an SSL certificate for a function app. (autogenerated)

az functionapp config ssl show --resource-group MyResourceGroup --certificate-name cname.mycustomdomain.com

Required Parameters

--certificate-name

The name of the certificate.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc

Default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az functionapp config ssl unbind

Unbind an SSL certificate from a function app.

az functionapp config ssl unbind --certificate-thumbprint
                                 [--hostname]
                                 [--ids]
                                 [--name]
                                 [--resource-group]
                                 [--slot]
                                 [--subscription]

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

Optional Parameters

--hostname

The custom domain name. If empty, hostnames will be selected automatically.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the function app.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc

Default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az functionapp config ssl upload

Upload an SSL certificate to a function app.

az functionapp config ssl upload --certificate-file
                                 --certificate-password
                                 [--certificate-name]
                                 [--ids]
                                 [--name]
                                 [--resource-group]
                                 [--slot]
                                 [--subscription]

Examples

Upload an SSL certificate to a function app. (autogenerated)

az functionapp config ssl upload --certificate-file {certificate-file} --certificate-password {certificate-password} --name MyFunctionApp     --resource-group MyResourceGroup

Required Parameters

--certificate-file

The filepath for the .pfx file.

--certificate-password

The ssl cert password.

Optional Parameters

--certificate-name

The name of the certificate.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the function app.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc

Default value: json

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.