How can I configure Key Vault with Wildcard certificate to auto renew API Management service certificate?

Question

How can I configure Key Vault with Wildcard certificate to auto renew API Management service certificate?

EnterpriseArchitect 6,041

How can I configure the Azure Key Vault with the Azure App Service Wildcard certificate to auto-renew the API Management service certificate?

The goal here is to automate the custom domain API.company.com SSL certificate renewal, rather than using the *.azure-api.net subdomain.

JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2023-12-05T20:24:35.2633333+00:00

@EnterpriseArchitect

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

1 answer

Your answer

JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2023-12-05T20:24:35.2633333+00:00

@EnterpriseArchitect

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Answer 1

Akshay-MSFT 17,956 Microsoft Employee Moderator

@EnterpriseArchitect

Thank you for posting your query on Microsoft Q&A, from above description, from above description it seems like you are looking to create/configure an App Service certificate, save it in KeyVault and set it to auto renew.

Please do correct me if this is not the case by responding in the comments section.

You must follow Create and manage an App Service certificate for your web app

To configure a WildCard certificate, Buy and configure an App Service certificate.
Store certificate in Azure Key Vault
Renew an App Service certificate
Export an App Service certificate

Thanks,

Akshay Kaushik

Please "Accept the answer (opting Yes under "Helpful")" and "share your feedback ". This will help us and others in the community as well.

EnterpriseArchitect 6,041 Reputation points

2023-11-29T06:25:22.5933333+00:00

Hi @Akshay-MSFT ,
Yes, what I need to perform is the automation process where the App Service Certificate can be renewed in the KeyVault of my choice, rather than manually downloading/exporting and then uploading/importing to the KeyVaults every year.
Akshay-MSFT 17,956 Reputation points Microsoft Employee Moderator

2023-11-29T10:11:31.0666667+00:00
@EnterpriseArchitect

In the above answer step 2, Store certificate in Azure Key Vault it does gives the option choose the KeyVault of your choice, provided it is in the same subscription and resource group as your App Service app.

Select certificate configuration and then select KeyVault of your choice:

Now choose the Vault you want to use as store for this cert:

Thanks,

Akshay Kaushik

Please "Accept the answer (opting Yes under "Helpful")" and "share your feedback ". This will help us and others in the community as well.
Akshay-MSFT 17,956 Reputation points Microsoft Employee Moderator

2023-11-30T08:47:19.4666667+00:00

@EnterpriseArchitect

Hope you got a chance to review the suggestion in comment above. Please do let me know if you have any queries in the comments section. If you don't have any further queries and the suggestion works as per your business need. Please "Accept the answer(Yes)" and "share you feedback ". This will help us and others in the community as well.

Thanks,

Akshay Kaushik

Share via

How can I configure Key Vault with Wildcard certificate to auto renew API Management service certificate?

1 answer

Your answer