Adding a Private Key Certificate from Key Vault in App Service

Question

Hello, I have a question.

I'm doing test right now, how to use App Service with Key Vault.

This is how I did.

1. Create App Service

Adding a Custom Domain

Activate ID

Create Key Vault(Created by RBAC Rule)

Granting All Permissions to App Service in Key Vault IAM

Push Certificate test.pem

Add Binding (Fetching from Key Vault)

Error Occur

(The service does not have access to '/subscriptions/****/resourcegroups/testkeyvalt/providers/microsoft.keyvault/vaults/appservicekeyvaulttest' Key Vault. Please make sure that you have granted necessary permissions to the service to perform the request operation.)

In Microsoft Learns, Confirm that App Service should use Access Policy instead of RBAC Rule(Maybe wrong)

Delete default Key Vault and Create new Key Vault(Created by Access Policy Rule)

Granting All Permissions to App Service in Key Vault Access Policy

Push Certificate test.pem

Add Binding (Fetching from Key Vault)

Error Occur

(The parameter keyVaultSecret has an invalid value.)

{

"error": {

"code": "Unauthorized",

"message": "AKV10000: Request is missing a Bearer or PoP token."

}

}

https://stackoverflow.com/questions/76463957/azure-key-vault-error-message-akv10000-request-is-missing-a-bearer-or-pop-toke/76470667?noredirect=1#comment134854224_76470667

In Stack Overflow, I can find similar like my issue, but I cannot be sure this solution fit on my problem.

Also, I gave full permission but still didn't work.

Anyone know about this issue?

Thank youHello, I have a question.

I'm doing test right now, how to use App Service with Key Vault.

This is how I did.

Create App Service

Adding a Custom Domain

Activate ID

Create Key Vault(Created by RBAC Rule)

Granting All Permissions to App Service in Key Vault IAM

Push Certificate test.pem

Add Binding (Fetching from Key Vault)

Error Occur

(The service does not have access to '/subscriptions/****/resourcegroups/testkeyvalt/providers/microsoft.keyvault/vaults/appservicekeyvaulttest' Key Vault. Please make sure that you have granted necessary permissions to the service to perform the request operation.)

In Microsoft Learns, Confirm that App Service should use Access Policy instead of RBAC Rule

Delete default Key Vault and Create new Key Vault(Created by Access Policy Rule)

Granting All Permissions to App Service in Key Vault Access Policy

Push Certificate test.pem

Add Binding (Fetching from Key Vault)

Error Occur

(The parameter keyVaultSecret has an invalid value.)

{

"error": {

"code": "Unauthorized",

"message": "AKV10000: Request is missing a Bearer or PoP token."

}

}

https://stackoverflow.com/questions/76463957/azure-key-vault-error-message-akv10000-request-is-missing-a-bearer-or-pop-toke/76470667?noredirect=1#comment134854224_76470667

In Stack Overflow, I can find similar like my issue, but I cannot be sure this solution fit on my problem.

Also, I gave full permission but still didn't work.

Anyone know about this issue?

Thank you

Answer 1

Only PFX certificates can be applied, but a PEM certificate was used, causing the issue. The issue has been resolved.

Answer 2

Thanks mate, you saved me. What an unclear error!