How to Create an API Management SSL Certificate?

Murakami, Keiichi/村上 恵一 1 Reputation point
2021-11-02T08:25:15.003+00:00

I am trying to insert an ApplicationGateway in an Azure environment before an API Management, but I get an error setting the certificate.

I don't know about SSL certificate, so I don't know how to deal with it. Could an expert tell me how to prepare a certificate and how to deal with it?

<situation>

1)Environment

VM → APIM → Function →
insert AppGW
VM → AppGW → APIM → Function →.

2)APIM is TLS 1.2 fixed by default and requires a certificate between AppGW and APIM.

3)Both AppGW and APIM can be registered only with CER, and self-created certificates cannot be registered.

4)After exporting an appropriate certificate of a personal PC in the following procedure, the PC was registered in AppGW and APIM. However, when checking the "Backend Health" of AppGW, "anomaly" is displayed in "certificate mismatch".

https://learn.microsoft.com/en-us/azure/application-gateway/c...

5)In 4) above, AppGW is v1sku, and regarding the procedure of v2sku, the root certificate could not be exported with the certificate exported from the above personal PC.

Could you tell me how to create a proper CER certificate to set AppGW → APIM?

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
1,782 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pramod Valavala 20,591 Reputation points Microsoft Employee
    2021-11-08T17:09:37.463+00:00

    @Murakami, Keiichi/村上 恵一 Unless you are using a custom domain, there shouldn't be a problem. If so, you could just remove it at the APIM level and setup TLS termination at the App Gateway level instead.

    If you still require a custom domain for your scenario, I find that generating them using the openssl CLI works best. This official doc covers the steps required for the same.

    0 comments