How to Install SSL Certificate on Microsoft Azure?

Steps for Installing an SSL Certificate on Microsoft Azure

SSL, or secure socket layer, certificates are essential for encrypting data to be transmitted between a web server and browser. For Microsoft Azure websites, installing an SSL certificate is relatively straightforward and simple. In this article, we will discuss the necessary steps required to install an SSL certificate on Microsoft Azure.

The Prerequisites for Installing an SSL Certificate on Microsoft Azure

Buy/Renew SSL Certificate
Generate CSR on Azure
Apply for SSL Certificate Issuance
Complete the Domain Validation Process
Complete the Organization Validation Process (Only for Extended & Organization Validation)

Step 1: Prepare your Certificate for Upload

Upon receiving the SSL certificates from the Certificate Authority, unzip and extract their contents to your device for quick access.

The next step is to merge the server, root, and intermediate certificates from separate files into a single file.

Create a separate file named certificatemerge.crt
Open all the three certificate files
Copy their contents
Paste them into the newly created .crt file

Make sure you paste the content of the certificates in the following sequence:

Server certificate
Intermediate certificates
Root Certificate

Step 2: Export the SSL Certificate to PFX File

Once you have completed the merging process for your SSL certificate, be sure to export the full PFX file including both private key and certificate.

We will be using OpenSSL to export the certificate. Open the command prompt and type in:

openssl pkcs12 -export -inkey privateKey.key -in certFileName.crt -certfile CACertificate.crt -out nameYouWantForPFX.pfx

Replace “privateKey.key” with the name of your private key file, “certFileName.crt” with the certificate you just merged, and “CACertificate.crt” with the Certificate Authority certificate.

Step 3: Upload & Install SSL Certificate in Azure

Log into your Microsoft Azure account, click on App Services
Select the website you want to add the SSL certificate to
Click on SSL certificates, here you will be able to upload your certificate.
Click on Upload Certificate
Choose the PFX file that you have exported in Step 2
Enter the password for your PFX file and click “Ok”.

Bind the Certificate with following steps

Go to “SSL Settings”
click on “Bindings”.
Select the certificate that was uploaded in Step 3 and click “Add Binding”.

After completing these steps, your SSL certificate should be installed, and you can now access your website securely.

Troubleshooting

If you are still having trouble installing your SSL certificate, make sure to check the following:

Buy/Renew SSL Certificate from Trusted Certificate Authority as Sectigo, Certera or Comodo
Make sure that all technical requirements for installing SSL on Azure are fulfilled.
Ensure that all the necessary files (server certificate, intermediate certificates, root certificates) are present in the certFileName.crt file.
Verify that the private key and certificate are matching.
When uploading the PFX file, make sure you’ve entered the correct password for it.
Check if your domain is active in Azure before trying to bind the certificate to it.
Use our SSL Checker tool to check the Proper SSL Installation

If these steps do not work, contact your Certificate Authority or Microsoft Azure Support for further assistance.

FAQs

Q1: Why is SSL 3.0 not provided in Azure?

SSL 3.0 is an outdated cryptographic protocol with known vulnerabilities, so it is not provided in Azure. Microsoft has deprecated the use of SSL 3.0 & recommends using TLS 1.2 or higher instead, as they are more secure protocols. For improved security, Azure also recommends enabling HTTP Strict Transport Security (HSTS) on your applications to help ensure that all requests are served over HTTPS. Additionally, disabling insecure protocols like SSL 3.0 ensures that only secure connections can be established between a client and server when using Azure services.

Q2: What is the minimum requirement for installing an SSL Certificate on Microsoft Azure?

The minimum requirement for installing an SSL Certificate on Microsoft Azure is that it must be in PFX format with a private key & all the necessary certificates (server certificate, intermediate certificates, root certificate). Additionally, you need access to your Azure account & have the correct permissions to install the certificate.