Unable to Associate Key Vault with App Certificate

Question

Hi,

I'm trying to complete the assignment of an Application Service Certificate. The last step is to assign to a Key Vault. I followed the instructions in the portal, but keep getting an error:

Failed to link certificate with the Selected Key Vault.
Check below errors for more detail.:
The parameter keyVaultCsmld has an invalid value.

---

I'm not using a command line and figure out why this is failing. Thanks for any help.

Thanks,

.::jb

Answer 1

@Jermon Bafaty

I saw a similar issue before that may be related to your problem. When we use the "Azure Appservice certificate" the overview page shows the option to "Configure required KeyVault store." Then it will direct to the page "Store, Verify, Assign." Once the KeyVault is imported this operation should be succeeded.

The likely cause of your problem is that the Azure KeyVault with RBAC support model doesn't support the Key Vault RBAC permission model and it is necessary to use Azure Key Vault with access policies method. You need to either change the access model to "access policies" or (if you don't have permission to change the access model) create a new Key Vault with access policy as the method.

 

Our documentation mentions this limitation.

https://learn.microsoft.com/en-us/azure/key-vault/general/rbac-migration#vault-access-policy-to-azure-rbac-migration-steps:~:text=Custom%20role%20required-,Note,-Azure%20App%20Service

 

Let me know if this helps and if you still face this issue.

If the information helped you, please Accept the answer. This will help us as well as others in the community who may be researching similar information. Otherwise let me know if you have further questions.