Certs in front door not actually using the latest version

Question

I have updated my certs in key vault and it has been over 6 hours and the front door secrets are still using the previous cert version. How can I get this updated to the current version?

Answer 1

Hi @ Reed at PS,

Welcome to Microsoft Q&A Platform.

When you update a certificate in Azure Key Vault that is used by Azure Front Door (Standard/Premium) as a customer-managed TLS certificate, the update behavior depends on how the secret version is configured.

If you select a specific version of your certificate, you have to reselect the new version manually when you update your certificate.

As per Microsoft Document: Renew customer-managed TLS certificates

It takes up to 72 hours for the new version of the certificate/secret to be automatically deployed.

If the secret version is set to “Latest”, Azure Front Door automatically detects and uses the updated certificate version from Azure Key Vault. However, certificate deployment across the global Front Door infrastructure can take up to 72 hours.

No manual action is required unless the update has not propagated after this period.

Pleaseand “up-vote” wherever the information provided helps you, this can be beneficial to other community members.