TLS/SSL - No Option to Create App Service Manged Certificate

Ryan 21

I have a WebApp provisioned, deployed, and live on Azure Government. I have added my custom domain, and would like to bind an SSL certificate to prevent warnings when navigated to. Under TLS/SSL Settings I have no option to "Create App Service Managed Certificate." The only options I see under TLS/SSL Settings -> Private Key Certificates (.pfx) are "Import Key Vault Certificate" and "Upload Certificate." My WebApp is provisioned in the S1 Tier, and I have also tried changing the app service plan between higher and lower tiers to see if it would work but nothing will show this option. How can I go about resolving this so I can create an app service managed certificate and bind it to my custom domain?

Thank you in advance any help!

risolis 8,701 Reputation points

2022-05-14T22:47:56.173+00:00

Hello @Ryan

Thank you for posting your concern.

I understand that you are having a hard time to get this done as you intent for this scenario.

Now I believe you are referring to this section below:

So, this is not what you are looking for as per your comment.... I wonder what type of SSL/TLS certificate is the one you need to import!

Is this a Self-signed or Trusted CA certificate and so on?

Regards,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Ryan 21 Reputation points

2022-05-15T00:10:20.24+00:00

That is the section I am referring to, but my screen does not show the option "Create App Service Managed Certificate." I've attached an Image of what my UI shows:
risolis 8,701 Reputation points

2022-05-15T02:19:48.28+00:00

The normal procedure to get this customer domain as well as your own TLS certificate is the following:

1-Import Private Keys(Choose the settings needed like (HTTPS only and version required)
2-Upload certificate and you browse on your PC where your certificate file is saved(PFX format).
3-Then, you should see it under Private key section:

4-Then, click on Bindings selection and after this step, there you get an option SSL/TLS bindings
5-Once there you shall choose Customer Domain as well as choose certificate and TLS/SSL type.
6-Finally, Add binding

Those are the points to follow to get this certificate provision on your app.

Note: Just double check that you are not blocking the PIP on any NSG(Just in case)

Regards,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Accepted answer

SnehaAgrawal-MSFT 18,286 Reputation points

2022-05-16T10:22:19.617+00:00

@Ryan Thanks for reaching here! If I have understood right you are are live on Azure Government, and you are not able to see create App Service Managed certificate and App Service certificate options even while using Standard tier. If so, as mentioned in the Compare Azure Government and global Azure

Please let us know if further query or issue remains.
Please sign in to rate this answer.

1 person found this answer helpful.
Ryan 21 Reputation points

2022-05-16T19:45:17.257+00:00

Understood, this is the answer I was anticipating. Thank you.

Ryan 21 Reputation points

2022-05-17T03:06:32.883+00:00

@SnehaAgrawal-MSFT

Does this mean I cannot use a custom domain on Microsoft Azure Government at all? I'm not even getting the option to buy a certificate at all... I would just like to make my webapp navigable to with a custom domain that is secured.

SnehaAgrawal-MSFT 18,286 Reputation points

2022-05-17T15:49:15.003+00:00

Thanks for reply, As per above mentioned document: for managed offering where you can buy a cert or domain through Azure its not supported in any National Cloud.

But you can bind a domain or upload a certificate you purchase from any other registrar.

Once you obtain a certificate from your certificate provider, follow the steps in below document link to make it ready for App Service.

: https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2Cportal#upload-a-private-certificate

Let us know if further query on this.
Sign in to comment

TLS/SSL - No Option to Create App Service Manged Certificate

0 additional answers