How to Install an SSL Certificate on Microsoft Azure?

If you’re using Microsoft Azure to host your website, installing an SSL certificate is simple. In this blog, we’ll walk you through obtaining an Azure SSL certificate and installing it on your Azure web server.

Generation of CSR

Generating a CSR code for Microsoft Azure requires a process different from that of other server platforms, as Azure does not have the option to generate the code within its interface. Azure only allows for the uploading of SSL certificates from the Azure console.

To complete this process, you must use the IIS (Internet Information Services) manager on a local Windows machine, install your certificate on the IIS server, and export it as a PFX format from the Windows server before importing it into the Microsoft Azure portal.

Install an SSL Certificate on Microsoft Azure

Step-1

Before securing your Azure web app with an SSL certificate, ensure the certificate meets the criteria:

• PFX file encrypted with triple DES, protected with a password
• Private key length of at least 2048 bits
• Includes intermediate and root certificates

Note: Only Basic, Standard, Premium, or Isolated web app plans support third-party certificates.

Step 1: Download the certificate archive and extract it.

Step 2: Combine the server, root, and intermediate certificates into a single “mergedcertificate.crt” file in the sequence: server, intermediate 1 & 2, root.

Step-2

The next step is to export the merged SSL certificate along with its private key to a PFX file.

Here is the process to export the SSL certificate as a PFX file using OpenSSL:

openssl pkcs12 -export -out 5. myserver.pfx -inkey -in <merged-certificate-file>

Remember to replace <merged-certificate-file> and the other placeholders with the actual paths to your private key and merged certificate file.

Step-3

To upload the certificate to your Azure App Service, follow these steps:

• Log in to the Azure portal.
• Select App Services from the left menu and then select your app.
• Go to TLS/SSL settings > Private Key Certificates(.pfx) > Upload Certificate.
• Choose your PFX file in the PFX Certificate File section.
• Enter the password you created when you exported the PFX file in the Certificate password field and click Upload.
• Finally, follow the Azure documentation to create a certificate binding so that your domain is encrypted with this specific certificate.

It’s done!

Where to Buy an SSL Certificate for Microsoft Azure Server?

You can buy an Azure security certificate from CheapSSLWeb. Compare the various SSL certificate types, and choose the Azure load balancer SSL to secure incoming traffic to your website using SSL certificates.