SSL certificate not updating in API management customn domains

Question

I am having issues when I update the SSL certificate on the custom domains within API management services.

I have tried uploading the certificate and using it from keyvault and both look like they have gone through but when I refresh the page the old certificate is still there. Waited for a couple of hours did not help.

We are using the basic tier with the depreciated dev portal and the a customn domains for this portal and the api's.

I also checked if API management has access to the keyvault (blade managed identities) which is the case. it has the correct secret permissions.

What to do since the old certificate expires in 2 weeks. Thanks!

Answer 1

Hi @sebastiaan sollie Thanks for reaching out. It can take up to 4 hours for custom domain certificate to be updated with new Key Vault certificate. In case of emergency, you can always manually upload a certificate to APIM which gets completed in about an hour. Is the issue is still existing? As you mentioned that you had waited for couple of hours do you see any error message? If yes can you share me the error details to investigate further ?