How do we renew the Certificate on Azure

Geeaz 121 Reputation points
2021-01-22T13:43:56.857+00:00

Hello Azure,

We have some of the applications registered on Azure AD (Enterprise apps). Now we have received an alert saying "our application certificate needs renewal". When checked on the Azure AD Enterprise apps: We did find the app but we don't get to see the Certificates/secrets nor the Manifest of the Application to renew the certificates. How can we renew such keys/certificates.

When we search for the same application name on Azure search window, we find those as Managed Identity. Can this be renewed, if yes how is it renewed.

Any details required, please let me know quickly.

Geeaz

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

5 answers

Sort by: Most helpful
  1. Geeaz 121 Reputation points
    2021-02-10T11:43:52.333+00:00

    @JamesTran-MSFT ,

    We were able to renew the Symmetric Keys for the applications using the below PowerShell command

    New-MsolServicePrincipalCredential -AppPrincipalId $AppID -Type Symmetric -Usage Sign -Value $newclientsecret -StartDate $dtStart -EndDate $dtEnd

    Reference: https://learn.microsoft.com/en-us/sharepoint/dev/sp-add-ins/replace-an-expiring-client-secret-in-a-sharepoint-add-in

    Similarly, we want to renew Asymmetric keys for our apps whose keys are expired. How can this be done? Please suggest.

    Request your assistance on the above.

    0 comments No comments

  2. Geeaz 121 Reputation points
    2021-02-10T11:43:52.9+00:00

    @JamesTran-MSFT ,

    We were able to renew the Symmetric Keys for the applications using the below PowerShell command

    New-MsolServicePrincipalCredential -AppPrincipalId $AppID -Type Symmetric -Usage Sign -Value $newclientsecret -StartDate $dtStart -EndDate $dtEnd

    Reference: https://learn.microsoft.com/en-us/sharepoint/dev/sp-add-ins/replace-an-expiring-client-secret-in-a-sharepoint-add-in

    Similarly, we want to renew Asymmetric keys for our apps whose keys are expired. How can this be done? Please suggest.

    Request your assistance on the above.

    0 comments No comments

  3. Geeaz 121 Reputation points
    2021-02-11T05:05:49.847+00:00

    Hi Azure,

    Anyone who could assist here.

    0 comments No comments

  4. Geeaz 121 Reputation points
    2021-02-11T11:35:04.817+00:00

    Anyone From Azure AD Enterprise AppTeam?

    0 comments No comments

  5. Geeaz 121 Reputation points
    2021-02-13T12:16:47.287+00:00

    Does anyone know the answer from the Azure AD team? I don't know. This is ridiculous.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.