Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,447 questions
Managed certificate in API Management custom domain expired
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(80, 31%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
Bear
20
Reputation points
I set up a Custom Domain in API Management service, with Certificate set to Managed (Preview). The custom domain works fine when it set up. However, I noticed the certificate was expired recently. It says "Expiry: 12/5/2023, thumbprint: XXXX". I cannot find any specific reason why this Managed certificate expired or how shall I renew the certificate.
Azure API Management
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(115.19999999999999, 10%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
MuthuKumaranMurugaachari-MSFT 22,441 Reputation points Moderator2024-01-16T20:03:55.97+00:00 Bear Thanks for posting your question in Microsoft Q&A. Yes, Managed Certificate is auto renewed automatically but it appears that it failed in your APIM instance.
Here are a few limitations to keep in mind and then validate the following along with DNS configuration:
- CNAME - should resolve to default APIM instance like below. Otherwise, the certificate is not renewed.
- TXT record - Configure as suggested
If it doesn't help and still need assistance, share correlation id/request id, timestamp etc., that will be helpful in investigating the logs.
- CNAME - should resolve to default APIM instance like below. Otherwise, the certificate is not renewed.
-
Bear 20 Reputation points
2024-01-17T14:06:08.83+00:00 Hi Muthu, I checked the DNS configurations and confirmed the CNAME and TXT records are correct (they were created when the Custom Domain was registered and never changed after that). Where can I find the reasons for the failure, and how to re-trigger the renewal?
-
MuthuKumaranMurugaachari-MSFT 22,441 Reputation points Moderator
2024-01-17T14:20:42.7433333+00:00 Bear This requires deeper investigation of the backend logs to find the cause and needs support engagement. Please share correlation id/request id, timestamp etc. and I can assist you further.
-
MuthuKumaranMurugaachari-MSFT 22,441 Reputation points Moderator
2024-01-19T14:04:47.3466667+00:00 Bear If you still need assistance with this, let me know. We can connect offline to resolve this.
-
Bear 20 Reputation points
2024-01-24T13:42:54.7366667+00:00 Hi MuthuKumaranMurugaachari-MSFT, Sure. Lemme now how shall we connect.
-
MuthuKumaranMurugaachari-MSFT 22,441 Reputation points Moderator
2024-01-24T14:18:48.9966667+00:00 Bear Send an email to
azcommunity@microsoft.comreferencing this thread with your subscription ID (not name), APIM details (correlation id/request id, timestamp) along with subject as "Attn: Muthu".
Sign in to comment
Sign in to answer