Share via

az webapp config ssl

  • Reference

Note

This command group has commands that are defined in both Azure CLI and at least one extension. Install each extension to benefit from its extended capabilities. Learn more about extensions.

Configure SSL certificates for web apps.

Commands

Name Description Type Status
az webapp config ssl bind

Bind an SSL certificate to a web app.

 Core GA
az webapp config ssl bind (appservice-kube extension)

Bind an SSL certificate to a web app.

 Extension GA
az webapp config ssl create

Create a Managed Certificate for a hostname in a webapp app.

 Core Preview
az webapp config ssl delete

Delete an SSL certificate from a web app.

 Core GA
az webapp config ssl import

Import an SSL or App Service Certificate to a web app from Key Vault.

 Core GA
az webapp config ssl list

List SSL certificates for a web app.

 Core GA
az webapp config ssl show

Show the details of an SSL certificate for a web app.

 Core GA
az webapp config ssl unbind

Unbind an SSL certificate from a web app.

 Core GA
az webapp config ssl unbind (appservice-kube extension)

Unbind an SSL certificate from a web app.

 Extension GA
az webapp config ssl upload

Upload an SSL certificate to a web app.

 Core GA

az webapp config ssl bind

Bind an SSL certificate to a web app.

az webapp config ssl bind --certificate-thumbprint
                          --ssl-type {IP, SNI}
                          [--hostname]
                          [--ids]
                          [--name]
                          [--resource-group]
                          [--slot]
                          [--subscription]

Examples

Bind an SSL certificate to a web app. (autogenerated)

az webapp config ssl bind --certificate-thumbprint {certificate-thumbprint} --name MyWebapp --resource-group MyResourceGroup --ssl-type SNI

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

--ssl-type

The ssl cert type.

Accepted values: IP, SNI

Optional Parameters

--hostname

The custom domain name. If empty, hostnames will be selected automatically.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the web app. If left unspecified, a name will be randomly generated. You can configure the default using az configure --defaults web=<name>.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az webapp config ssl bind (appservice-kube extension)

Bind an SSL certificate to a web app.

az webapp config ssl bind --certificate-thumbprint
                          --ssl-type {IP, SNI}
                          [--ids]
                          [--name]
                          [--resource-group]
                          [--slot]
                          [--subscription]

Examples

Bind an SSL certificate to a web app. (autogenerated)

az webapp config ssl bind --certificate-thumbprint {certificate-thumbprint} --name MyWebapp --resource-group MyResourceGroup --ssl-type SNI

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

--ssl-type

The ssl cert type.

Accepted values: IP, SNI

Optional Parameters

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the web app. You can configure the default using az configure --defaults web=<name>.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az webapp config ssl create

Preview

This command is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Create a Managed Certificate for a hostname in a webapp app.

az webapp config ssl create --hostname
                            --name
                            --resource-group
                            [--certificate-name]
                            [--slot]

Examples

Create a Managed Certificate for cname.mycustomdomain.com.

az webapp config ssl create --resource-group MyResourceGroup --name MyWebapp --hostname cname.mycustomdomain.com

Required Parameters

--hostname

The custom domain name.

--name -n

Name of the web app.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--certificate-name

The name of the certificate.

--slot -s

The name of the slot. Default to the productions slot if not specified.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az webapp config ssl delete

Delete an SSL certificate from a web app.

az webapp config ssl delete --certificate-thumbprint
                            --resource-group

Examples

Delete an SSL certificate from a web app. (autogenerated)

az webapp config ssl delete --certificate-thumbprint {certificate-thumbprint} --resource-group MyResourceGroup

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az webapp config ssl import

Import an SSL or App Service Certificate to a web app from Key Vault.

az webapp config ssl import --key-vault
                            --key-vault-certificate-name
                            [--certificate-name]
                            [--ids]
                            [--name]
                            [--resource-group]
                            [--subscription]

Examples

Import an SSL or App Service Certificate certificate to a web app from Key Vault.

az webapp config ssl import --resource-group MyResourceGroup --name MyWebapp --key-vault MyKeyVault --key-vault-certificate-name MyCertificateName

Import an SSL or App Service Certificate to a web app from Key Vault using resource id (typically if Key Vault is in another subscription).

az webapp config ssl import --resource-group MyResourceGroup --name MyWebapp --key-vault '/subscriptions/[sub id]/resourceGroups/[rg]/providers/Microsoft.KeyVault/vaults/[vault name]' --key-vault-certificate-name MyCertificateName

Required Parameters

--key-vault

The name or resource ID of the Key Vault.

--key-vault-certificate-name

The name of the certificate in Key Vault.

Optional Parameters

--certificate-name

The name of the certificate.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the web app. If left unspecified, a name will be randomly generated. You can configure the default using az configure --defaults web=<name>.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az webapp config ssl list

List SSL certificates for a web app.

az webapp config ssl list --resource-group

Examples

List SSL certificates for a web app. (autogenerated)

az webapp config ssl list --resource-group MyResourceGroup

Required Parameters

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az webapp config ssl show

Show the details of an SSL certificate for a web app.

az webapp config ssl show --certificate-name
                          --resource-group

Examples

Show the details of an SSL certificate for a web app. (autogenerated)

az webapp config ssl show --resource-group MyResourceGroup --certificate-name cname.mycustomdomain.com

Required Parameters

--certificate-name

The name of the certificate.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az webapp config ssl unbind

Unbind an SSL certificate from a web app.

az webapp config ssl unbind --certificate-thumbprint
                            [--hostname]
                            [--ids]
                            [--name]
                            [--resource-group]
                            [--slot]
                            [--subscription]

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

Optional Parameters

--hostname

The custom domain name. If empty, hostnames will be selected automatically.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the web app. If left unspecified, a name will be randomly generated. You can configure the default using az configure --defaults web=<name>.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az webapp config ssl unbind (appservice-kube extension)

Unbind an SSL certificate from a web app.

az webapp config ssl unbind --certificate-thumbprint
                            [--ids]
                            [--name]
                            [--resource-group]
                            [--slot]
                            [--subscription]

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

Optional Parameters

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the web app. You can configure the default using az configure --defaults web=<name>.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az webapp config ssl upload

Upload an SSL certificate to a web app.

az webapp config ssl upload --certificate-file
                            --certificate-password
                            [--certificate-name]
                            [--ids]
                            [--name]
                            [--resource-group]
                            [--slot]
                            [--subscription]

Examples

Upload an SSL certificate to a web app. (autogenerated)

az webapp config ssl upload --certificate-file {certificate-file} --certificate-password {certificate-password} --name MyWebapp     --resource-group MyResourceGroup

Required Parameters

--certificate-file

The filepath for the .pfx file.

--certificate-password

The ssl cert password.

Optional Parameters

--certificate-name

The name of the certificate.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the web app. If left unspecified, a name will be randomly generated. You can configure the default using az configure --defaults web=<name>.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.