ADCS certificate

Question

ADCS certificate

Prasant Chettri 146

From ADCS certificate it gives me two certificate download options. One is .cer and another p7b. If am planning to generate pfx file to upload on keyvault for app services. Would using .cer to complete the it suffice or it would required p7b ?

Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2023-11-08T02:58:24.9066667+00:00

@Prasant Chettri , Just checking in to see if you had got a chance to see the previous response. If the answer helped (pointed, you in the right direction) > please click Accept Answer Or please share the requested/more info to help you better.
Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2023-12-11T19:50:32.8366667+00:00

@Prasant Chettri , Hope you are doing well.

If the answer helped (pointed, you in the right direction) > please click Accept Answer - it will help users to find the answers quickly.

1 answer

Your answer

Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2023-11-08T02:58:24.9066667+00:00

@Prasant Chettri , Just checking in to see if you had got a chance to see the previous response. If the answer helped (pointed, you in the right direction) > please click Accept Answer Or please share the requested/more info to help you better.
Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2023-12-11T19:50:32.8366667+00:00

@Prasant Chettri , Hope you are doing well.

If the answer helped (pointed, you in the right direction) > please click Accept Answer - it will help users to find the answers quickly.

Answer 1

Ajay Kumar N 28,161 Microsoft Employee Moderator

@Prasant Chettri , To better assist you on this, could you please more details about your requirement/scenario?

Azure App Services' Authentication / Authorization (EasyAuth) functionality already has the necessary logic to handle key rollover automatically. See this doc.

If you are looking to add digital security certificates to use in your application code or to secure custom DNS names in Azure App Service.

See Private certificate requirements.
Public certificates aren't used to secure custom domains, but you can load them into your code if you need them to access remote resources.

Based on your requirement, you could leverage The free App Service managed certificate (ASMC) which already satisfy the requirements of App Service. If you choose to upload or import a private certificate to App Service, your certificate must meet the Private certificate requirements. However, the free ASMC comes with a few limitations.

Ref: Active Directory Certificate Services (ADCS) | key features

Prasant Chettri 146 Reputation points

2023-11-04T02:35:33.5833333+00:00

This is for custom domain for internal certificate as requested by the client. When I am using ADCS I wonder if base64 or DER works better
Ajay Kumar N 28,161 Reputation points Microsoft Employee Moderator

2023-11-06T19:26:39.5866667+00:00

Thanks for the follow-up and additional info.

It depends on your specific use case and requirements. Both formats are supported by ADCS, so you may choose the one that works best for your needs.
You may checkout this blog here: The Nightmare of Validating Certificate Requests

Having mentioned that, we may have to re-tag to receive insights from the targetted audience/SMEs.

Share via

ADCS certificate

1 answer

Your answer