APIM Backends - validate certificate name and validate certificate chain

Nagashree Balasundaram 741 Reputation points
2022-12-08T20:15:04.367+00:00

The APIM Backends configuration includes two flags - Validate Certificate Name and Validate Certificate Chain.
What does APIM Validate the certificate Name and certificate Chain against?
Does this require a client certificate to be loaded in APIM (or in a keyvault referenced by APIM)?
What is the implication if the validate certificate name and validate certificate chain attributes are set to false?

Are these attributes only applicable for self-signed certificates?

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,457 questions
0 comments No comments
{count} votes

Accepted answer
  1. JananiRamesh-MSFT 29,276 Reputation points
    2022-12-12T15:07:22.357+00:00

    Hi @Nagashree Balasundaram Thanks for reaching out.
    Validate certificate Name: By default, APIM doesn't validate backend certificate names. You can enable this by creating a Backend entity representing your backend and selecting "Validate certificate name" option.

    Validate certificate chain: If your backend is using a self-signed certificate/ SSL certificate issued by a Custom CA APIM doesn't trust those certificates in this case you can set validate certificate chain to false so that APIM will not validate it.

    If you need to validate the backend certificate chain for self-signed certificate/ SSL certificate issued by a Custom CA you will need to upload the root and intermediate certificates used by the backend into APIM (Certificates --> CA Certificates)

    Do let me know if you have any queries.

    Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

    3 people found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Vicente M. Tanio 0 Reputation points
    2023-10-17T09:18:25.3566667+00:00

    ❤️ most helpful


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.