Failed to connect to management Endpoint...

Question

Hello. I've recently integrated API management inside a Vnet. I've built my Application gateway successfully, and heath probes for the portal, gateway and manager are showing healthy. I've configured DNS records for the Portal, Manager and API on GoDaddy to point to the public IP, and now following the link to the developer portal brings up this page as expected:

This naturally leads me onto wishing to publish the developer portal. However on the Portal Overview plane, the option to publish the portal is greyed out and I'm seeing this:

I've also having this error message popping up, which is obviously related:

Any ideas? I'm fairly new to Azure so go easy with your technical answers haha. But any help would be massively welcome! :)

Answer 1

Hi @Anonymous Thanks for reaching out. I believe the issue could be due to self signed cert, verify if the management endpoint can be accessed via a browser without any certificate related warnings. From your machine, you can open a browser and navigate to https://servicename.management.azure-api.net/servicestatus (be sure to replace servicename.management.azure-api.net with your custom domain, if they have configured one). If you see any certificate related warnings while accessing this Url, then you will not be able to open Developer Portal on your machine as the browser will block calls to the management endpoint. To address this problem, you can either remove custom domain from the management endpoint (if possible) or alternately, address the problem with the certificate (it may be untrusted certificate) as it is self signed certificate. click on advanced in the warnings and allow. after that you will see 200 status.

let me know if this resolves the issue else will connect offline to troubleshoot the same.

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.

Answer 2

Hi Rob, could you confirm that you have done the internal DNS update for below endpoint point them to the private IP of APIM gateway?

Please refer this. When you access the APIM within subnet or internal network connected to your subnet via express route/(other option), your internal DNS should resolve your APIM domains to the private IP of gateway.

https://learn.microsoft.com/en-us/azure/api-management/api-management-using-with-internal-vnet?tabs=stv2

Endpoint	Endpoint configuration
API Gateway	contosointernalvnet.azure-api.net
API Gateway	contosointernalvnet.azure-api.net
Developer portal	contosointernalvnet.portal.azure-api.net
The new developer portal	contosointernalvnet.developer.azure-api.net
Direct management endpoint	contosointernalvnet.management.azure-api.net
Git	contosointernalvnet.scm.azure-api.net