Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,213 questions
Unable to change the application gateway settings via Azure PowerShell
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 13%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJN%3C/text%3E%3C/svg%3E)
JayaPrakash Naidu C S
5
Reputation points
Hey There!
I'm trying to update the existing app gateway by adding a new backend pool using Azure powershell.
But it is throwing me the below error.
Set-AzApplicationGateway : Data or KeyVaultSecretId must be specified for certificate
'/subscriptions/xxx/resourceGroups/xxx/providers/Microsoft.Network/applicationGateways/xxx/trustedRootCertificates/xxx-cert'. If you are providing certificate data,
please upload the certificate again, otherwise please remove the certificate and all references. Subsequent operations will continue to fail with this error message until a valid certificate replaces the existing certificate or the
certificate is removed. For secrets/certificates referenced by key vault, please ensure connectivity to key vault is possible and the referenced secret/certificate has not been disabled.
At line:1 char:1
+ Set-AzApplicationGateway -ApplicationGateway $appgateway
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : CloseError: (:) [Set-AzApplicationGateway], CloudException
+ FullyQualifiedErrorId : Microsoft.Azure.Commands.Network.SetAzureApplicationGatewayCommand
The commands used are below
$appgateway=Get-AzApplicationGateway -Name xxxx -ResourceGroupName xxx
Add-AzApplicationGatewayBackendAddressPool -ApplicationGateway $appgateway -Name "Pool02" -BackendFqdns "contoso1.com", " contoso1.com"
Set-AzApplicationGateway -ApplicationGateway $appgateway
If I do the same thing from the portal everything is working fine, just failing via azure powershell.
Kindly Help.
Azure Application Gateway
Windows for business Windows Server User experience PowerShell
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 27%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
VasimTamboli 5,215 Reputation points2023-05-24T14:42:25.8933333+00:00 Verify the certificate configuration: Check the certificate configuration for the application gateway. Ensure that the certificate referenced in the error message is valid and properly configured. If you are providing certificate data, make sure it is uploaded correctly. If the certificate is referenced from a Key Vault, ensure that the Key Vault is accessible and the referenced secret/certificate is enabled.
Check connectivity to the Key Vault: If the certificate is referenced from a Key Vault, ensure that the Azure PowerShell session has connectivity to the Key Vault. Verify that the appropriate access policies and permissions are configured to access the secret/certificate from the Key Vault.
Remove or replace the problematic certificate: If the certificate causing the issue is not required or is causing conflicts, you can try removing the certificate and all its references from the application gateway. Alternatively, if a valid certificate is available, you can upload it again and update the application gateway configuration accordingly.
Validate command parameters: Double-check the parameters passed to the
Set-AzApplicationGatewayandAdd-AzApplicationGatewayBackendAddressPoolcommands. Ensure that all the required parameters are provided correctly and that the backend pool is configured properly.Update Azure PowerShell: Make sure you are using the latest version of Azure PowerShell. Use the
Update-Modulecommand to update Azure PowerShell to the latest version and retry the command. -
JayaPrakash Naidu C S 5 Reputation points
2023-05-24T17:08:25.32+00:00 @VasimTamboli Everything is proper I would say.
I updated the modules.
The certificate is valid and configured properly(Working fine from the portal)
Access policies and parameters don't have any issues.
Even I tried cloud PowerShell resulted in the same issue.
As I mentioned earlier everything is working fine from the portal.
What makes sure that the PowerShell command has some issue is -> I tried to update the same thing via CLI using the below command
az network application-gateway address-pool create -g xxx --gateway-name xxx -n testpool --servers 10.0.0.4 10.0.0.5And it worked like a wonder without any errors, Definitely, there is some issue with the Azure Powershell command for updating the gateway.
-
VasimTamboli 5,215 Reputation points
2023-05-25T17:45:24.2633333+00:00 @JayaPrakash Naidu C S Well then some more i can suggest not sure this will fix but cant dig more into it.
Check PowerShell version: Ensure that you are using the latest version of Azure PowerShell by updating the Azure modules. You can use the
Update-Modulecommand to update Azure PowerShell.Check module compatibility: Verify that all required modules are installed and compatible with each other. Sometimes, module version mismatches can cause issues. You can use the
Get-InstalledModulecommand to check the installed module versions.Validate certificate configuration: Double-check the certificate configuration for the application gateway. Make sure that the certificate referenced in the error message is valid and properly configured. If you are using a certificate from a Key Vault, ensure that the Key Vault is accessible and the referenced secret/certificate is enabled.
Verify connectivity to the Key Vault: If the certificate is referenced from a Key Vault, ensure that the Azure PowerShell session has connectivity to the Key Vault. Verify that the appropriate access policies and permissions are configured to access the secret/certificate from the Key Vault.
Check command parameters: Review the parameters passed to the
Set-AzApplicationGatewayandAdd-AzApplicationGatewayBackendAddressPoolcommands. Ensure that all the required parameters are provided correctly and that the backend pool is configured properly.- Test with different PowerShell environment: If possible, try executing the same PowerShell commands on a different machine or PowerShell environment to isolate any potential local configuration issues.
If the Azure CLI command (
az network application-gateway address-pool create) worked without any issues and successfully updated the application gateway, while the Azure PowerShell command (Set-AzApplicationGateway) encountered an error, it indicates that there might be a specific issue with the Azure PowerShell command or its execution in your environment.In such cases, it is recommended to report the issue to Microsoft Azure support or post a question on the Azure PowerShell GitHub repository (https://github.com/Azure/azure-powershell). The Azure PowerShell team can investigate the specific error you encountered and provide guidance or fix any potential issues with the command.
By reporting the issue, you can help the Azure PowerShell team identify and address any bugs, compatibility issues, or configuration problems related to the
Set-AzApplicationGatewaycommand.
Sign in to comment
Sign in to answer