Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,137 questions
I've replaced the certificate on some app proxy apps, but the site is still loading the msappproxy cert
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(259.20000000000005, 38%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMC%3C/text%3E%3C/svg%3E)
Matt Chapman
0
Reputation points
Hi
I've created some enterprise apps and configured them for app proxy.
I also have a wildcard cert for my domain, and have uploaded this cert to the apps
But, when I go to the site, I get a certificate error and looking at the cert, it's the default *.msappproxy.net one
I've done this before with no problems, but have replaced the cert as it had expired.
Can anyone help me figure out why the uploaded cert hasn't taken?
Thanks
Matt
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 26%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
Navya 14,990 Reputation points Microsoft Vendor2025-01-23T12:30:02.0966667+00:00 Thank you for posting this in Microsoft Q&A.
I understand that you have replaced the certificate on some App Proxy apps, but the site is still loading the msappproxy certificate. Based on the information you provided, I gather that you are using a wildcard certificate. To resolve the issue, could you please check the following:
- Can you confirm that the wildcard matches the external URL?
- Are you using the wildcard certificate for subdomains? If you're using the same certificate to secure a subdomain not covered by the wildcard, you'll need to add that subdomain as a Subject Alternative Name (SAN) in the certificate.
- Could you please share a screenshot of the certificate error to help us better understand the issue?"
Hope this helps. Do let us know if you any further queries.
Thanks,
Navya.
-
Matt Chapman 0 Reputation points
2025-01-24T11:17:26.25+00:00 Hi Navya
Thanks for the response.
- Yes, the wildcard cert is on use on my website and is signed by comodo.
- I've used the previous version of the cert (I renewed it in December) and everything was fine and surely the point of a wildcard certificate is that you don't need to add the subdomains, hence the *.domain.com....
- I added the issue to my question. You can see that the app proxy has a certificate ending in "k.uk" (sorry, I would prefer not to add my actual domain here) and when going to the site, the certificate (in the second screenshot) being used is the msapproxy.net.
Matt
-
James Hamil 26,976 Reputation points Microsoft Employee2025-02-06T20:21:22.22+00:00 Hi @Matt Chapman , so sorry for the delay in response. I'm reviewing this case now. Are you still having the issue?
Sign in to comment
Sign in to answer