Is there any way to have a self renewing certificate for an Azure Web App?

Question

Hello

We have an application that uses Graph API.

We use self-signed certificates for communication between the Azure App Service and Azure App Registration.

The issue is that the certificates have an expiration date of one year and our customers often forget to renew the certificates.

Is there any way to have the renewal process automated?

Answer 1

Thanks for reaching here! If you have purrchased App Service certificate (A private certificate that's managed by Azure. It combines the simplicity of automated certificate management and the flexibility of renewal and export options.)

To elaborate App Service Certificates are issued for 1 year. You may toggle the automatic renewal setting of your App Service certificate at any time, select the certificate in the App Service Certificates page, then click Auto Renew Settings in the left navigation.
Select On or Off and click Save.

Certificates can start automatically renewing 31 days before expiration if you have automatic renewal turned on.

Further there is also an option of creating a free App Service managed certificate (A private certificate that's free of charge and easy to use if you just need to secure your custom domain in App Service.) this is fully managed by App Service and renewed continuously and automatically in six-month increments, 45 days before expiration.

You create the certificate and bind it to a custom domain, and let App Service do the rest. On side note free certificate comes with limitations:

Answer 2

Have you tried the App service managed certificate: https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate#create-a-free-managed-certificate