Failed to sync the certificate, via App Service Certificate.

Frits 1

We are unable to Sync an existing Key Vault to an App Service Certificate. We already added the desired access policy mentioned from this link https://social.msdn.microsoft.com/Forums/en-US/ae57feed-2917-4f21-8ab2-d0d6e9829994/failed-to-sync-the-certificate-the-service-does-not-have-access-to-8230vault-key-vault?forum=AzureKeyVault

Akshay-MSFT 16,126 Reputation points Microsoft Employee

2023-05-11T10:31:06.0066667+00:00

@Frits

Thank you for posting your query on Microsoft Q&A. I am reviewing this and will get back to you further inputs.

Thanks,

Akshay Kaushik
Akshay-MSFT 16,126 Reputation points Microsoft Employee

2023-05-11T11:21:04.7133333+00:00

@Frits

Thank you for posting your query on Microsoft Q&A, I was able to validate this error. This seems to be an access policy issue. As you have mentioned above that access permissions have already been assigned, could you please share the snip of service principal and assigned Permissions for certificate management operations

Thanks,

Akshay Kaushik
Frits 1 Reputation point

2023-05-11T13:03:10.2466667+00:00

@Akshay-MSFT

Thank you for the response, this is the list of the assigned application under access policy of our keyvault.
Akshay-MSFT 16,126 Reputation points Microsoft Employee

2023-06-05T11:09:18.1166667+00:00
@Frits

Apologies for the delay, the permissions look good, kindly validate the following:

Verify that the certificate is valid and has not expired. You can do this by checking the expiration date of the certificate in the Azure portal.

Verify that the certificate is correctly installed on the App Service. You can do this by checking the SSL bindings for the App Service in the Azure portal.

Verify that the certificate is correctly configured in the App Service settings. You can do this by checking the SSL settings for the App Service in the Azure portal.

Try deleting and re-creating the certificate in the Azure portal. This can sometimes resolve issues with syncing the certificate.

If none of the above steps work, try contacting Microsoft support for further assistance.

Please do let me know if you have any further queries.

Thanks,

Akshay Kaushik