Failed to Delete Basic Public Ip Reference for Basic SKU VPN Gateway

Question

Hi,

After clicking "Delete Basic Public Ip Reference" I encountered two error messages.

Failed to execute migration

Failed to execute migration to Remove Public IP. Error: There was an error processing your request. Try again in a few moments.

Deployment validation failed

Deployment validation failed. Additional details from the underlying API that might be helpful. The template deployment "VirtualNetworkGatewayUpdate-20260625222321" is not valid according to the validation procedure. The following resource provider(s) -"Microsoft.Network/virtualNetworkGateways (2025-05-01) reported preflight validation errors. Tracking id (REDACTED) . See inner errors for details.

Clicking on "Help me troubleshoot" provided rather general tips on checking public IP associations, gateway configurations, subnet and IP capacity.

I did notice that in a similar case, https://learn.microsoft.com/en-us/answers/questions/5864157/failed-to-remove-the-basic-sku-public-ip-address-r the solution involved opening the Point-to-site configuration to remove a certificate. In my setup there are three certs and I would not know which one(s) to safely remove.

I am therefore reaching out to see if anyone else has seen this.

I would be grateful for any advice.

Kind Regards,
John Sletten

Answer 1

Update

I managed to identify the expired certificate and duly removed it from the Point-to-site configuration.

After a delay of about 2 minutes, I got: "Successfully saved virtual network gateway 'VPNGatewayPrimary'.

Upon retrying the "Delete Basic Public Ip Reference" button I got a different message:

No migration necessary.

*Your Gateway does not have a PublicIpAddress reference or is using a PublicIpAddress with Standard Sku. No migration is necessary.

*The VPN connections are healthy and the old (basic) PublicIp resource no longer has an associated IP address.

I will monitor the gateway closely for the next 24 hours, but it seems that this matter is resolved now.

Thanks in any case.

John