This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 75%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
I am trying to setup an Application Gateway that will be setting with about 20 different sites that have their own domain names. In the listener, I've uploaded their pfx cert and in HTTP settings I have tried to set it up to use a well known CA certificate. The problem is it's trying to use some other cert so I'm seeing an error when I try to go to the site.
I tried to export port certificate from the server using https://learn.microsoft.com/en-us/azure/application-gateway/certificates-for-backend-authentication
but I keep getting an error:
Failed to save configuration changes to application gateway 'GW'. Error: Data for certificate GW-rg/providers/Microsoft.Network/applicationGateways/GW/trustedRootCertificates/tacgroup'>GW/tacgroup is invalid.
Or I get this:
Failed to save configuration changes to application gateway 'GW'. Error: Application Gateway GW-rg/providers/Microsoft.Network/applicationGateways/GW'>GW cannot have same certificate used across two Trusted Root Certificate elements.
One of the certs for another site I have been able to upload fine but they are totally different domain names so I'm not sure why it thinks its the same.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 36%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
We are looking into this currently and we will update you shortly.
Please send an email to azcommunity@microsoft.com with the below details, so that we can get connected on this matter for further troubleshooting. We'll continue to investigate this with you directly and will update the thread with any findings that may help others. Thank you.
Thread URL: https://learn.microsoft.com/en-us/answers/questions/121954/index.html
Your Azure Subscription ID:
Looking forward to your reply.
Thank you!
Sai Kishor
I have the same problem.
I'm also having the same problem.
Apologize for the delay in response. We are looking into this currently and will update you once we have more details. Thank you!
Apologize that the thread does not have an update. This error typically occurs if the certificate in question exists in Application Gateway auth cert list, matching it. However, this is best to be looked into by a support representative directly via call/chat. If you don't have a support plan, we can get you a one-time free support. Please send an email to azcommunity@microsoft.com with the below details(thread url and subscription ID)so that we can get connected on this matter for further troubleshooting. We'll continue to investigate this with you directly and will update the thread with any findings that may help others. Please include ATTN-SAI in the subject so its easier for me to find the email.
Thread URL: https://learn.microsoft.com/en-us/answers/questions/121954/index.html
Your Azure Subscription ID:
Thank you!