Application Gateway Listener TLS Certificate Issue

Question

Hello,

I have one issue related to Certificate in Azure application Gateway.

Currently, In the application gateway I uploaded the certificate in .pfx format and then mapped it with the listener.

But that same certificate is available in the Keyvalut and I added to the Listener TLS Certifcate section and then trying map with the Listener but am getting an error as below.

Please let me know what could be the reason.?

Thank you very much.

Answer 1

Hello Safi , Welcome to MS Q&A

Here are some steps to troubleshoot and resolve the problem:

1. Check Key Vault Access Policies: Ensure that the Application Gateway has the necessary permissions to access the Key Vault. You need to grant the Application Gateway's managed identity access to the Key Vault. Specifically, it should have the get and list permissions for secrets.
2. Verify Certificate Format: Ensure that the certificate in the Key Vault is in the correct format and is properly configured. The certificate should be in .pfx format and should include the private key.
3. Check Key Vault Configuration: Verify that the Key Vault is correctly configured to allow access from the Application Gateway. This includes checking network settings and firewall rules that might block access.
4. Review Listener Configuration: Double-check the listener configuration in the Application Gateway to ensure that it is correctly set up to use the certificate from the Key Vault.

I believe the error you're encountering is most likely due to the first step, but I recommend reviewing all other steps as well to ensure everything is covered.

If you still face any issues or have any doubts, please feel free to let us know.

Kindly confirm if this resolves the problem

Thanks

Deepanshu