How to resolve imported certificate is a self signed certificate error in AFD even though it is a certificate issued by a private CA?

Question

First I created CA in key vault (issuer is OnecertV2-PrivateCA)

then generated certificate with the domain name

but when I try to add this certificate in AFD it gives the following error:
'cannot add secret as self signed certificate is not allowed in BYOC'

but it is clearly not a self signed cert -it is issued by onecert-privateca.
How to resolve this?
error.jpg

Answer 1

Hi @Sachitha Chithralekha

Thank you for posting your question on Microsoft Q&A.

Based on the information you provided, it appears that AFD is treating the certificate you generated as a self-signed certificate, even though it was issued by OnecertV2-PrivateCA.

1.To confirm whether the certificate is self-signed, please check the issuer and subject values. If both values match, then the certificate is indeed self-signed. Need to create private certificate.

2.Also, it might be the root CA certificates are self-signed. To resolve this issue, you may need to add the CA to your trusted CA list. Here is a document that explains how to do this: https://ubuntu.com/server/docs/install-a-root-ca-certificate-in-the-trust-storethen try to add the certificate in AFD

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.