How to fix below error Failed to save configuration changes to application gateway <app gateway name>. Error: Data must be specified for Certificate <resource group name>/providers/Microsoft.Network/applicationGateways/<app gateway name>/sslCertificates

jayabarathi sinnathambi 5 Reputation points
2023-05-26T16:02:17.5166667+00:00

Getting below error after uploading pfx file in the app gateway listener with 443 port and save. instead of saving showing below error.
Kindly suggest the root cause and fix for the same.

Failed to save configuration changes to application gateway <app gateway name>. Error: Data must be specified for Certificate <resource group name>/providers/Microsoft.Network/applicationGateways/<app gateway name>/sslCertificates/<certificate file name>'><app gateway name>/<certificate file name>.

Thanks for your help

Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
958 questions
{count} vote

1 answer

Sort by: Most helpful
  1. ChaitanyaNaykodi-MSFT 22,856 Reputation points Microsoft Employee
    2023-05-26T22:57:13.2466667+00:00

    @jayabarathi sinnathambi

    Thank you for reaching out.

    This error message indicates that there is an issue with the SSL certificate that you are trying to upload to your Application Gateway. Specifically, it seems that the certificate data is missing.

    It will help if you could validate following details:

    • The certificate provided to the Application Gateway must be in Personal Information Exchange (PFX) format, which contains both the private and public keys. The supported PFX algorithms are listed at PFXImportCertStore function.
    • The certificate on the listener requires the entire certificate chain to be uploaded (the root certificate from the CA, the intermediates and the leaf certificate) to establish the chain of trust.

    These requirements are currently documented here.

    If above steps do not help in getting rid of the issue and not already tried, you can try uploading the certificate via PowerShell and see if that helps in getting rid of the issue.

    Please let us know if you need any help.

    0 comments No comments