Azure VPN Gateway - Configure Server Validation Certificate

Question

We have 2 VPN Gateway instances – one in DEVELOPMENT stage and one in PRODUCTION stage - which we are using for P2S connections.

The Server Validation certificate used by these 2 VPN Gateway are different. You can see the certificate used in the # P2S CA root certificate of the VPN Configuration file.

I am wondering how we can specify / change the Server Validation certificate to the same certificate?

PRODUCTION Stage: DigiCert Global Root CA is used as the Server Validation Certificate.

<Redacted>

DEVELOPMENT Stage  DigiCert Global Root G2 is used as the Server Validation Certificate.

<Redacted>

To clarify, I am not talking about the Root Certificates which are used for Client Authentication.  I need information about configuring the Server Validation certificate (as you can see it in the Azure VPN Client software screenshot below).

Answer 1

@Mandyam Bhoolokam Alwar Srinivas

Thank you for your patience here.

I got a response from the product team regarding this issue.

I am wondering how we can specify / change the Server Validation certificate to the same certificate?

The Server Validation certificate can’t be changed, this is the server certificate associated with a vpn server. This certificate is generated when gateway is created and comes as part of VPN profile which user downloads from Azure portal, this is used to authenticate the identity of VPN server to client.

It will help if you could file feature request for this issue with your use case on our feedback portal here.

---

I hope this has been helpful! Your feedback is important so please take a moment to accept answers. If you still have questions, please let us know what is needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!