When i try load my certificate on my custom domain on Azure front door. I am getting this error. I am using a cert from godaddy which is not self signed cert.

Question

Issue

When creating an Azure Front Door Secret from Key Vault, the operation fails with the following error:

"The certificate imported from the Key Vault is a Self Signed certificate and is not permitted for Bring Your Own Certificate."

However, the certificate is not self-signed.

Certificate Details

Current Certificate Issuer:

Plain Text

1

C=US,

2

O=GoDaddy.com,

3

CN=GoDaddy TLS Intermediate CA DV - R1v1

Answer 1

Did you add the full chain PFX to keyvault? You need to generate a PFX file from the godaddy crt files, SSL example:

openssl pkcs12 -export \
  -out output.pfx \
  -inkey private-key.key \
  -in your-domain.crt \
  -certfile gd_bundle-g2-g1.crt