Updating SSL certificate for App Service Azure

Question

In my case, I have an app service with a custom SSL certificate for one of the domains that is expiring soon. I uploaded a new certificate for that domain, but I can't find where in the Azure platform you can update the binding so that the new SSL certificate is used. Could someone please help?

Answer 1

Hi,

Browse to your web app in the portal, on left click Custom domains blade, then on right next to the domain click the context menu (three dots) and choose Update binding. When the flyout window comes up, select your new certificate from the dropdown and click Update.

Please click Accept Answer and upvote if the above was helpful. If something is unclear or you still need assistance add a comment below.

Thanks.

-TP

Answer 2

@B A Thanks for reaching here!

To further elaborate here-

Before a certificate expires, make sure to add the new certificate to your App Service and update any places where the certificate is used. For example, For an uploaded certificate, there's no automatic binding update. Based on your scenario, review the corresponding section:

• Renew an uploaded certificate
• Renew an App Service certificate
• Renew a certificate imported from Key Vault

You also want to know that when you replace an expiring certificate, the way you update the certificate binding with the new certificate might adversely affect user experience.

For example, your inbound IP address might change when you delete a binding, even if that binding is IP-based. This result is especially impactful when you renew a certificate that's already in an IP-based binding.

To avoid a change in your app's IP address, and to avoid downtime for your app due to HTTPS errors, follow these steps in the specified sequence:

1. Upload the new certificate.
2. Go to your app's Custom domains page, click on the actions button (...), and choose Update binding.
3. Select the new certificate and click Update.
4. Delete the old certificate. By doing this, you can avoid any interruptions to your app's service and prevent issues like HTTPS errors.

Please let us know if know if further query or issue remains.