How to remove the expired certificated from Azure App gateways listners

Question

How to remove the expired certificated from Azure App gateways listners

Girish Prajwal 706

Hi Team, We want to remove the Azure appgateway listener expired certificates using powershell. There are about 6 to 7 certificates to be removed. How can it be done on multiple Appgateways in a subscription We have multiple subscriptions where this cleanup has to be done.

KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-16T09:52:15.9166667+00:00

@Girish Prajwal

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Kapil
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-17T13:31:30.4866667+00:00

@Girish Prajwal

Could you please provide an update on this post?

Kindly let us know if this helps or you need further assistance on this issue.

Thanks,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
Girish Prajwal 706 Reputation points

2024-01-17T17:50:25.2533333+00:00

Can't I get the actual script. I have gone through those articles before reaching out to you. It didn't help me.
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-18T07:10:33.8566667+00:00
@Girish Prajwal

I take it that you would want to delete SSL Certificates from an Application Gateway using Powershell.

Refer : Remove-AzApplicationGatewaySslCertificate

The command is as follows.

$AppGw = Get-AzApplicationGateway -Name "<NameOfAppGateway>" -ResourceGroupName "<AppGatewayRgName>" Remove-AzApplicationGatewaySslCertificate -ApplicationGateway $AppGw -Name "<NameOfTheCertificate>" Set-AzApplicationGateway -ApplicationGateway $AppGw

In case you are not aware of the certificates' Name, you can always get it either via Portal or PS.

Portal:

Powershell

$AppGw = Get-AzApplicationGateway -Name "<NameOfAppGateway>" -ResourceGroupName "<AppGatewayRgName>" $AppGw.SslCertificates

This will list all the certificates associated to your App Gateway.

Kindly let us know if this helps or you need further assistance on this issue.

Thanks, Kapil
Girish Prajwal 706 Reputation points

2024-01-18T19:08:35.6133333+00:00

Hi Kapil, let me check and revert to you by next week.
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-22T07:06:56.11+00:00

@Girish Prajwal

Sure.

Please let us know once you got a chance to check the script.

Cheers,

Kapil
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-24T08:47:33.52+00:00

@Girish Prajwal

May I know if you got a chance to review my previous comment?

Please let me know if you are facing any challenges or if there are any follow-up questions, I shall be glad to address them.

Thanks,

Kapil
Girish Prajwal 706 Reputation points

2024-01-25T10:17:10.4966667+00:00

Hi Kapil, I am getting the list of certificates and I am aware on the removal process too.. I wanted to know the process to remove expired certificates using PS.
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-25T11:59:09.2+00:00
@Girish Prajwal

Do you or do you not know the names of the expired certificates?

Because, Azure Powershell, currently, has commands only to list and remove the certificates uploaded to an App gateway.

It cannot distinguish whether or not a Certificate is expired.

Neither does Azure Portal

It is the Customer's responsibility to identify the certificates that are expired and no longer in use and remove them.

Azure as a platform cannot check the expiration of a certificate.

I hope the above statements are clear.

If your intention is to get a list of expired certificates from Azure Powershell or Portal, I am afraid this is not possible.

If your intention is to get a list of certificates, and remove the expired ones (provided that you know the names of the expired ones already) - the above commands would come in handy.

Once again, even via Portal - you will not be able to say if a certificate is expired or not.

Cheers,

Kapil

Accepted answer

0 additional answers

Your answer

KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-16T09:52:15.9166667+00:00

@Girish Prajwal

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Kapil
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-17T13:31:30.4866667+00:00

@Girish Prajwal

Could you please provide an update on this post?

Kindly let us know if this helps or you need further assistance on this issue.

Thanks,

Kapil

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.
Girish Prajwal 706 Reputation points

2024-01-17T17:50:25.2533333+00:00

Can't I get the actual script. I have gone through those articles before reaching out to you. It didn't help me.
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-18T07:10:33.8566667+00:00

@Girish Prajwal

I take it that you would want to delete SSL Certificates from an Application Gateway using Powershell.

Refer : Remove-AzApplicationGatewaySslCertificate

The command is as follows.

$AppGw = Get-AzApplicationGateway -Name "<NameOfAppGateway>" -ResourceGroupName "<AppGatewayRgName>" Remove-AzApplicationGatewaySslCertificate -ApplicationGateway $AppGw -Name "<NameOfTheCertificate>" Set-AzApplicationGateway -ApplicationGateway $AppGw

In case you are not aware of the certificates' Name, you can always get it either via Portal or PS.

Portal:

Powershell

$AppGw = Get-AzApplicationGateway -Name "<NameOfAppGateway>" -ResourceGroupName "<AppGatewayRgName>" $AppGw.SslCertificates

This will list all the certificates associated to your App Gateway.

Kindly let us know if this helps or you need further assistance on this issue.

Thanks, Kapil
Girish Prajwal 706 Reputation points

2024-01-18T19:08:35.6133333+00:00

Hi Kapil, let me check and revert to you by next week.
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-22T07:06:56.11+00:00

@Girish Prajwal

Sure.

Please let us know once you got a chance to check the script.

Cheers,

Kapil
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-24T08:47:33.52+00:00

@Girish Prajwal

May I know if you got a chance to review my previous comment?

Please let me know if you are facing any challenges or if there are any follow-up questions, I shall be glad to address them.

Thanks,

Kapil
Girish Prajwal 706 Reputation points

2024-01-25T10:17:10.4966667+00:00

Hi Kapil, I am getting the list of certificates and I am aware on the removal process too.. I wanted to know the process to remove expired certificates using PS.
KapilAnanth-MSFT 49,616 Reputation points Microsoft Employee Moderator

2024-01-25T11:59:09.2+00:00

@Girish Prajwal

Do you or do you not know the names of the expired certificates?

Because, Azure Powershell, currently, has commands only to list and remove the certificates uploaded to an App gateway.

It cannot distinguish whether or not a Certificate is expired.

Neither does Azure Portal

It is the Customer's responsibility to identify the certificates that are expired and no longer in use and remove them.

Azure as a platform cannot check the expiration of a certificate.

I hope the above statements are clear.

If your intention is to get a list of expired certificates from Azure Powershell or Portal, I am afraid this is not possible.

If your intention is to get a list of certificates, and remove the expired ones (provided that you know the names of the expired ones already) - the above commands would come in handy.

Once again, even via Portal - you will not be able to say if a certificate is expired or not.

Cheers,

Kapil

Answer 1

Hello, @Girish Prajwal ,

Thanks for reaching to Microsoft Q and A platform.

There is a Microsoft Preview Portal, where you could see the list of the Certificate and delete which is not needed.
Main step is to disassociate the SSL Cert from the Listener and Associate the Listener to the New Valid certificate.
Now we have two option to delete Certs from the Application Gateway. Either using Portal, or via the PowerShell.

- Using Portal

Open Azure Preview Portal : https://preview.portal.azure.com/#home
Go to the App Gateway and open Listeners
You should see a "Listener TLS certificates (Preview)" tab The detail procedure is given here: Cert Deletion

-Using PowerShell

Get the name of all the Expired cert with the Application Gateway, post running all the remove command perform the SET command.
To delete using Powershell

--Please don't forget to "[Accept the answer]" and “[Upvote]” if the reply is helpful--

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Regards Priya Kumar

Share via

How to remove the expired certificated from Azure App gateways listners

0 additional answers

Your answer