Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,283 questions
Key vault Certficate Secret imported on FrontDoor but cannot select the secret for BYOC for domain verification
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 80%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGC%3C/text%3E%3C/svg%3E)
Garth Cornelis
0
Reputation points
Key vault Certificate Secret added to FrontDoor but when trying the domain verification, You are unable to select the secret from FrontDoor for BYOC.
Gave the Managed Identity Azure FrontDoor Secrets reader on resource group, and Secrets Reader on the Key vault. Managed identity configured on FrontDoor and role-based access on Key vault. Do not believe the issue is the key vault.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 27%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERP%3C/text%3E%3C/svg%3E)
Raja Pothuraju 6,265 Reputation points Microsoft Vendor2024-09-02T20:42:42.69+00:00 Hello @Garth Cornelis,
Thank you for posting your query on Microsoft Q&A.
I am checking this and will get back to you with further inputs.
Thanks,
Raja Pothuraju. -
Raja Pothuraju 6,265 Reputation points Microsoft Vendor
2024-09-09T22:27:41.89+00:00 Hello @Garth Cornelis,
Thank you for giving me time.
Based on your description, it seems you're having trouble selecting the secret from Front Door for BYOC (Bring Your Own Certificate). I recommend checking if the certificate is in the correct format. Azure Front Door only supports certificates uploaded to your key vault as a PFX file with the content type
application/x-pkcs12. Also, ensure that the Common Name (CN) of the certificate matches the domain configured in Azure Front Door.If the certificate is in the correct format and the CN matches the domain, verify that the managed identity has the necessary permissions to access the key vault. For testing purposes, you can try granting the Key Vault Secrets User role on the key vault.
Reference:
How to configure HTTPS custom domains with Azure Front Door
Azure Front Door managed identity
Thanks,
Raja Pothuraju. -
Raja Pothuraju 6,265 Reputation points Microsoft Vendor
2024-09-12T21:26:54.53+00:00 Hello @Garth Cornelis,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Sign in to comment
Sign in to answer