AS2 cert issue

Alekhya 0

Hi, I am using logic apps for our EDI documents and need to connect to external system through AS2 connection. I have used APIM to mask the logic app URL(http trigger).

For AS2 connection, we generated and installed CA self-signed our company certificate in azure and added private key to azure key vault.

I am trying to install CA self signed certificate in azure APIM(As of now APIM has Microsoft signed cert), so proxy service that will be exposed to third party system will have CA self signed SHC certificate that they need to install. I am having issues to tie that certificate to APIM. can anyone help here.

Loknath Mahali 0 Reputation points Microsoft Vendor

2025-01-23T04:22:44.7066667+00:00
Hello @Alekhya,

Greetings! Welcome to Microsoft Q&A forum. Thank you for posting this question here.

It sounds like you’re trying to configure Azure API Management (APIM) to expose a self-signed certificate (issued by your Certificate Authority) as the public-facing certificate for your AS2 connection. Here's a step-by-step outline on how to troubleshoot and configure your setup

First Prepare the Certificate Files and ensure that you have the complete certificate chain available for the certificate you want to install in APIM, including the server certificate (your CA-signed certificate) and the root certificate (your internal CA's root certificate) and also please note these should be available in a .pfx or .cer format (for import into Azure).

If you haven’t already, import your self-signed certificate (along with the private key) into Azure Key Vault, in the Key Vault, go to the Certificates section and click on Generate/Import, select Import, and upload the .pfx file containing your certificate and private key.

Now open your Azure API Management instance in the Azure portal navigate to Certificates under Security in the APIM service click on + Add to upload the certificate to APIM and you should be able to upload the .pfx file from the Key Vault and also make sure the certificate has both the public certificate and private key.

After importing the certificate, you need to bind it to the API Gateway's endpoint to do this navigate to API Management, go to API > Design > API Settings there in the SSL Settings, configure the SSL certificate to be used for your exposed API and this would typically be the self-signed certificate you imported earlier.

Note: Make sure the self-signed certificate is correctly imported into both your Key Vault and APIM instance, ensuring it includes the private key. Once bound to the correct custom domain or API endpoint, your third-party system should be able to trust the connection using your CA self-signed certificate.

If you find the answer helpful, kindly click "Accept Answer" and upvote it. If you have any further questions or concerns, please feel free to reach out to us. We are happy to assist you.
Alekhya 0 Reputation points

2025-01-23T19:18:05.41+00:00

Hi @Loknath Mahali ,I appreciate your help here, but I did follow all the steps before which are mentioned above, but still when I access my endpoint , it is not secured. i will try one more time from the beginning once more and see if it works. Will reach out on the output.

2 answers

Alekhya 0 Reputation points

2025-01-23T17:48:03.3366667+00:00

Hi @Loknath Mahali ,

I appreciate all your help here, but I did follow all the steps earlier which you have mentioned. But still when I access my end point it is not secured.

I will try once more and see, if not will reach out to you here.
Please sign in to rate this answer.
Loknath Mahali 0 Reputation points Microsoft Vendor

2025-01-27T04:40:37.6033333+00:00

Hello @Alekhya,

Hope you are doing great.

Can you please share an update regarding the issue that you are facing, so that we are here to assist you at our earliest convenience.

Alekhya 0 Reputation points

2025-01-27T17:30:58.7733333+00:00

Hi @Loknath Mahali ,

I tried above all the steps, but I am not able to tie the self-signed cert to the custom domain. It still gives me http not https. But the default domain has the azure Microsoft self-signed cert. Any leads on this issue?

Loknath Mahali 0 Reputation points Microsoft Vendor

2025-01-28T06:54:37.23+00:00

Hello @Alekhya,

We are really sorry for the inconvenience caused to you, It sounds like you are trying to install a CA self-signed certificate in Azure API Management (APIM) to use for your AS2 connection.

To install your CA self-signed certificate in APIM, do follow these steps:

Upload your CA self-signed certificate to Azure Key Vault.

In APIM, go to the "Certificates" section and click "Add".

Select "Import a certificate from Key Vault" and choose your CA self-signed certificate from the list.

Enter a friendly name for the certificate and click "Create".

Once you have imported your CA self-signed certificate into APIM, you can associate it with your custom domain by following these steps:

In APIM, go to the "Custom domains" section and click "Add".

Enter your custom domain name and select "HTTPS" as the protocol.

Choose your imported CA self-signed certificate from the list of available certificates.

Click "Create".

After completing the above steps, your custom domain will be associated with your CA self-signed certificate, and you should be able to use HTTPS for your AS2 connection.

If you are still having issues with tying the certificate to APIM, please let me know and provide more information about the specific error message you are receiving, so that we will guide your accordingly.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Alekhya 0 Reputation points

2025-01-28T05:17:26.19+00:00

Hi @Loknath Mahali I didnt find this my current version APIM

navigate to API Management, go to API > Design > API Settings there in the SSL Settings, configure the SSL certificate

below screen shot
Please sign in to rate this answer.
Loknath Mahali 0 Reputation points Microsoft Vendor

2025-01-28T06:57:52.0266667+00:00

Hello @Alekhya,

To know you APIM Version go to APIM and in overview you can find the platform version that is your APIM version which is STV2.
Also, for your reference have a look on the below image.

Alekhya 0 Reputation points

2025-01-28T17:10:29.28+00:00

Hi @Loknath Mahali ,

I have version stv2.1 and I am not able to navigate to API Management, go to API > Design > API Settings there in the SSL Settings, configure the SSL certificate in this version.

where do I find SSL settings in my current version?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

AS2 cert issue

2 answers

Your answer