az webapp config ssl
Note
This command group has commands that are defined in both Azure CLI and at least one extension. Install each extension to benefit from its extended capabilities. Learn more about extensions.
Configure SSL certificates for web apps.
Name | Description | Type | Status |
---|---|---|---|
az webapp config ssl bind |
Bind an SSL certificate to a web app. |
Core | GA |
az webapp config ssl bind (appservice-kube extension) |
Bind an SSL certificate to a web app. |
Extension | GA |
az webapp config ssl create |
Create a Managed Certificate for a hostname in a webapp app. |
Core | Preview |
az webapp config ssl delete |
Delete an SSL certificate from a web app. |
Core | GA |
az webapp config ssl import |
Import an SSL or App Service Certificate to a web app from Key Vault. |
Core | GA |
az webapp config ssl list |
List SSL certificates for a web app. |
Core | GA |
az webapp config ssl show |
Show the details of an SSL certificate for a web app. |
Core | GA |
az webapp config ssl unbind |
Unbind an SSL certificate from a web app. |
Core | GA |
az webapp config ssl unbind (appservice-kube extension) |
Unbind an SSL certificate from a web app. |
Extension | GA |
az webapp config ssl upload |
Upload an SSL certificate to a web app. |
Core | GA |
Bind an SSL certificate to a web app.
az webapp config ssl bind --certificate-thumbprint
--ssl-type {IP, SNI}
[--hostname]
[--ids]
[--name]
[--resource-group]
[--slot]
[--subscription]
Bind an SSL certificate to a web app. (autogenerated)
az webapp config ssl bind --certificate-thumbprint {certificate-thumbprint} --name MyWebapp --resource-group MyResourceGroup --ssl-type SNI
The ssl cert thumbprint.
The ssl cert type.
The custom domain name. If empty, hostnames will be selected automatically.
One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.
Name of the web app. If left unspecified, a name will be randomly generated. You can configure the default using az configure --defaults web=<name>
.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
The name of the slot. Default to the productions slot if not specified.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
Bind an SSL certificate to a web app.
az webapp config ssl bind --certificate-thumbprint
--ssl-type {IP, SNI}
[--ids]
[--name]
[--resource-group]
[--slot]
[--subscription]
Bind an SSL certificate to a web app. (autogenerated)
az webapp config ssl bind --certificate-thumbprint {certificate-thumbprint} --name MyWebapp --resource-group MyResourceGroup --ssl-type SNI
The ssl cert thumbprint.
The ssl cert type.
One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.
Name of the web app. You can configure the default using az configure --defaults web=<name>
.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
The name of the slot. Default to the productions slot if not specified.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
This command is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus
Create a Managed Certificate for a hostname in a webapp app.
az webapp config ssl create --hostname
--name
--resource-group
[--certificate-name]
[--slot]
Create a Managed Certificate for cname.mycustomdomain.com.
az webapp config ssl create --resource-group MyResourceGroup --name MyWebapp --hostname cname.mycustomdomain.com
The custom domain name.
Name of the web app.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
The name of the certificate.
The name of the slot. Default to the productions slot if not specified.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
Delete an SSL certificate from a web app.
az webapp config ssl delete --certificate-thumbprint
--resource-group
Delete an SSL certificate from a web app. (autogenerated)
az webapp config ssl delete --certificate-thumbprint {certificate-thumbprint} --resource-group MyResourceGroup
The ssl cert thumbprint.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
Import an SSL or App Service Certificate to a web app from Key Vault.
az webapp config ssl import --key-vault
--key-vault-certificate-name
[--certificate-name]
[--ids]
[--name]
[--resource-group]
[--subscription]
Import an SSL or App Service Certificate certificate to a web app from Key Vault.
az webapp config ssl import --resource-group MyResourceGroup --name MyWebapp --key-vault MyKeyVault --key-vault-certificate-name MyCertificateName
Import an SSL or App Service Certificate to a web app from Key Vault using resource id (typically if Key Vault is in another subscription).
az webapp config ssl import --resource-group MyResourceGroup --name MyWebapp --key-vault '/subscriptions/[sub id]/resourceGroups/[rg]/providers/Microsoft.KeyVault/vaults/[vault name]' --key-vault-certificate-name MyCertificateName
The name or resource ID of the Key Vault.
The name of the certificate in Key Vault.
The name of the certificate.
One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.
Name of the web app. If left unspecified, a name will be randomly generated. You can configure the default using az configure --defaults web=<name>
.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
List SSL certificates for a web app.
az webapp config ssl list --resource-group
List SSL certificates for a web app. (autogenerated)
az webapp config ssl list --resource-group MyResourceGroup
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
Show the details of an SSL certificate for a web app.
az webapp config ssl show --certificate-name
--resource-group
Show the details of an SSL certificate for a web app. (autogenerated)
az webapp config ssl show --resource-group MyResourceGroup --certificate-name cname.mycustomdomain.com
The name of the certificate.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
Unbind an SSL certificate from a web app.
az webapp config ssl unbind --certificate-thumbprint
[--hostname]
[--ids]
[--name]
[--resource-group]
[--slot]
[--subscription]
The ssl cert thumbprint.
The custom domain name. If empty, hostnames will be selected automatically.
One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.
Name of the web app. If left unspecified, a name will be randomly generated. You can configure the default using az configure --defaults web=<name>
.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
The name of the slot. Default to the productions slot if not specified.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
Unbind an SSL certificate from a web app.
az webapp config ssl unbind --certificate-thumbprint
[--ids]
[--name]
[--resource-group]
[--slot]
[--subscription]
The ssl cert thumbprint.
One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.
Name of the web app. You can configure the default using az configure --defaults web=<name>
.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
The name of the slot. Default to the productions slot if not specified.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
Upload an SSL certificate to a web app.
az webapp config ssl upload --certificate-file
--certificate-password
[--certificate-name]
[--ids]
[--name]
[--resource-group]
[--slot]
[--subscription]
Upload an SSL certificate to a web app. (autogenerated)
az webapp config ssl upload --certificate-file {certificate-file} --certificate-password {certificate-password} --name MyWebapp --resource-group MyResourceGroup
The filepath for the .pfx file.
The ssl cert password.
The name of the certificate.
One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.
Name of the web app. If left unspecified, a name will be randomly generated. You can configure the default using az configure --defaults web=<name>
.
Name of resource group. You can configure the default group using az configure --defaults group=<name>
.
The name of the slot. Default to the productions slot if not specified.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Global Parameters
Increase logging verbosity to show all debug logs.
Show this help message and exit.
Only show errors, suppressing warnings.
Output format.
JMESPath query string. See http://jmespath.org/ for more information and examples.
Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID
.
Increase logging verbosity. Use --debug for full debug logs.
Azure CLI feedback
Azure CLI is an open source project. Select a link to provide feedback: