Unable to change application gateway settings.

Question

Unable to change application gateway settings.

I try to add Rules but following Error occurred .

"""
Failed to save application gateway changes

Failed to save configuration changes to application gateway '<my-AGW-name>'. Error: Data or KeyVaultSecretId must be specified for certificate <cetificate-name>. If you are providing certificate data, please upload the certificate again, otherwise please remove the certificate and all references. Subsequent operations will continue to fail with this error message until a valid certificate replaces the existing certificate or the certificate is removed. For secrets/certificates referenced by key vault, please ensure connectivity to key vault is possible and the referenced secret/certificate has not been disabled.

"""
then I try to delete my ssl-sertification using Azure CLI but it could be Failed cause this certification referenced by http-listner,

at the same time next following Error occurred http-listner was not found .

(InvalidResourceReference) Resource /subscriptions/resourceGroups/providers/Microsoft.Network/applicationGateways/sslCertificates/ <cetificate-name> referenced by Resource /subscriptions/resourceGroups/providers/Microsoft.Network/applicationGateways/sslCertificates/http-listener was not found. Please make sure that the referenced resource exists, and that both resources are in the same region.

Code: InvalidResourceReference
I'm sure this http-listener exists in my resource group and also in the same region.
If I want to delete these resources what should I do ?

Answer 1

@片平　賢太郎 / katahira kentarou

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I understand that you are facing issues with deleting a SSL certificate in Azure App gateway.

• I suggested to delete the listener from the Portal
• However, you said that the App Gateway has only one Listener and so, we cannot delete it.
• I suggested you to,
• Check the Managed Identity, Key Vault and Certificate Secret with the latest version ? In case you no longer have a valid certificate in the key vault, you can select "Upload a Certificate" and upload a dummy self-signed certificate, so the error goes away.
  or
• Delete the whole Application gateway in case you are planning to reconfigure the gateway altogether.
• You went ahead with the latter option and the issue is now resolved.

Appreciate your patience and contribution to Microsoft Q&A.

Thanks,

Kapil

---

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.