Azure Function App - Error While Loading System Keys

Question

Azure Function App - Error While Loading System Keys

John Rennemeyer 0

I've setup an Azure Function App and when trying to access the "App Keys", I get the following error for both System Keys and Host Keys:

Error while loading system keys Ask questions and use troubleshooting tools to investigate these errors. Diagnose and solve problems

The operation timed out and could not be completed. Please retry the action or try again later.

I have my storage account setup and my db setup as well as a website that is working. I just can't get the function app to display this information. When I check the storage account, I don't see the files that should be created by the function app.

Any help would be appreciated.

Thank you,

John Rennemeyer

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-02-26T05:41:24.3666667+00:00

Hi @John Rennemeyer,

If you are unable to see the files under storage account, it means the Function App is unable to connect to the storage account through the App Setting AzureWebJobsStorage or there is a network misconfiguration on the storage side. Refer the blog
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-02-27T14:59:31.1366667+00:00

@John Rennemeyer , Just checking in to see if the provided solution was helpful.
John Rennemeyer 0 Reputation points

2025-02-27T17:17:02.95+00:00

It was somewhat helpful in guiding us down the path we think the issue is occurring, however, we are still unable to get it working. The Function App is unable to talk to the storage account (at least the files are not being created in Blob storage as expected.

My question begs whether the blob storage container only gets created on the creation of the Function App or if it would get created on a restart of the Function App service?

Also, our organization currently has a policy that requires the firewall to disable all access at the storage account firewall. I've tried setting up private endpoints, but still no go. I'm not sure how to get the Function App to be able to access the storage account at this point.

The article states the following:

If your App is integrated with a Virtual Network, ensure this subnet is allowed on the storage account firewall.

With our policy setting the storage firewall to disabled for all access at the org level, I don't think the above is possible, unless I'm missing something.

It also states:

I’ve seen cases where the Vnet & Subnet are allowed on the Storage Account Firewall but customers sometimes forget to actually integrate the App with the Vnet. This causes the secrets folder to be absent on the storage. Also, ensure Service Endpoints/Private Endpoints are configured correctly.

Unfortunately, I don't know what "actually integrate the App with the Vnet" means. Also, knowing what the correct configuration for the private endpoints is still a mystery. I assume I have it right, but I don't know for sure.

I'm currently in the process of getting access to Azure Support as this is a show stopper for us, but any further help in the meantime would be appreciated.

Thanks,

John
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-02-28T12:48:23.1433333+00:00

Refer MSDOC and SO answer to integrate function App with virtual network(vnet) using Private Endpoints.
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-03-03T09:41:06.6666667+00:00

@John Rennemeyer , Just checking in to see if provided solution helps to resolve your issue.
John Rennemeyer 0 Reputation points

2025-03-10T17:20:26+00:00
Azure support has identified an issue with some of our private dns zones in another subscription that might be interfering with the Function App functioning correctly. They are in the process of moving the Private DNS Zones to the Network Hub level. Once this is done, I will be able to test the Function App and will report back. I don't have an ETA on when this will be done.

Thank you for your help. I did get this response in regard to the other two pages you sent on Feb 28th from Azure Support:

Regarding the Elastic premium requirement, that is true to some extent. You can host your Function Apps on 3 different types of plans.

Traditional App Service plans, just like you would for an App Service. These do support VNET integration.

Elastic Premium Function App plans. These do support VNET integration.

Consumption Function App plans. These do not support VNET integration. Regarding the other stack overflow post, that is only necessary if you are using managed identity to authorize requests to the storage account. One thing to note is the two app settings that are suggested at the beginning of the answer are now toggles in the portal on the vnet integration page. No need for the App Setting anymore you can simply toggle these features on/off in the portal.
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-03-11T11:53:17.4566667+00:00

Sure John Rennemeyer, I hope there is no issue from function App side. Do let me know if you still face issues while loading System Keys
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-03-12T04:09:39+00:00

John Rennemeyer, Just checking in to see if the issue is resolved. If you have any further queries, do let us know.

Your answer

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-02-26T05:41:24.3666667+00:00

Hi @John Rennemeyer,

If you are unable to see the files under storage account, it means the Function App is unable to connect to the storage account through the App Setting AzureWebJobsStorage or there is a network misconfiguration on the storage side. Refer the blog
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-02-27T14:59:31.1366667+00:00

@John Rennemeyer , Just checking in to see if the provided solution was helpful.
John Rennemeyer 0 Reputation points

2025-02-27T17:17:02.95+00:00

It was somewhat helpful in guiding us down the path we think the issue is occurring, however, we are still unable to get it working. The Function App is unable to talk to the storage account (at least the files are not being created in Blob storage as expected.

My question begs whether the blob storage container only gets created on the creation of the Function App or if it would get created on a restart of the Function App service?

Also, our organization currently has a policy that requires the firewall to disable all access at the storage account firewall. I've tried setting up private endpoints, but still no go. I'm not sure how to get the Function App to be able to access the storage account at this point.

The article states the following:

If your App is integrated with a Virtual Network, ensure this subnet is allowed on the storage account firewall.

With our policy setting the storage firewall to disabled for all access at the org level, I don't think the above is possible, unless I'm missing something.

It also states:

I’ve seen cases where the Vnet & Subnet are allowed on the Storage Account Firewall but customers sometimes forget to actually integrate the App with the Vnet. This causes the secrets folder to be absent on the storage. Also, ensure Service Endpoints/Private Endpoints are configured correctly.

Unfortunately, I don't know what "actually integrate the App with the Vnet" means. Also, knowing what the correct configuration for the private endpoints is still a mystery. I assume I have it right, but I don't know for sure.

I'm currently in the process of getting access to Azure Support as this is a show stopper for us, but any further help in the meantime would be appreciated.

Thanks,

John
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-02-28T12:48:23.1433333+00:00

Refer MSDOC and SO answer to integrate function App with virtual network(vnet) using Private Endpoints.
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-03-03T09:41:06.6666667+00:00

@John Rennemeyer , Just checking in to see if provided solution helps to resolve your issue.
John Rennemeyer 0 Reputation points

2025-03-10T17:20:26+00:00

Azure support has identified an issue with some of our private dns zones in another subscription that might be interfering with the Function App functioning correctly. They are in the process of moving the Private DNS Zones to the Network Hub level. Once this is done, I will be able to test the Function App and will report back. I don't have an ETA on when this will be done.

Thank you for your help. I did get this response in regard to the other two pages you sent on Feb 28th from Azure Support:

Regarding the Elastic premium requirement, that is true to some extent. You can host your Function Apps on 3 different types of plans.

Traditional App Service plans, just like you would for an App Service. These do support VNET integration.

Elastic Premium Function App plans. These do support VNET integration.

Consumption Function App plans. These do not support VNET integration. Regarding the other stack overflow post, that is only necessary if you are using managed identity to authorize requests to the storage account. One thing to note is the two app settings that are suggested at the beginning of the answer are now toggles in the portal on the vnet integration page. No need for the App Setting anymore you can simply toggle these features on/off in the portal.
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-03-11T11:53:17.4566667+00:00

Sure John Rennemeyer, I hope there is no issue from function App side. Do let me know if you still face issues while loading System Keys
Pravallika Kothaveeranna Gari 955 Reputation points Microsoft External Staff Moderator

2025-03-12T04:09:39+00:00

John Rennemeyer, Just checking in to see if the issue is resolved. If you have any further queries, do let us know.

Share via

Azure Function App - Error While Loading System Keys

Your answer