Microsoft.Web certificates 2015-08-01

The certificates resource type can be deployed to: Resource groups.

To learn about resource group deployments, see Bicep or ARM template.

Template format

To create a Microsoft.Web/certificates resource, add the following Bicep or JSON to your template.

resource symbolicname 'Microsoft.Web/certificates@2015-08-01' = {
  name: 'string'
  location: 'string'
  tags: {
    tagName1: 'tagValue1'
    tagName2: 'tagValue2'
  }
  kind: 'string'
  properties: {
    cerBlob: 'string'
    expirationDate: 'string'
    friendlyName: 'string'
    hostingEnvironmentProfile: {
      id: 'string'
      name: 'string'
      type: 'string'
    }
    hostNames: [
      'string'
    ]
    issueDate: 'string'
    issuer: 'string'
    password: 'string'
    pfxBlob: 'string'
    publicKeyHash: 'string'
    selfLink: 'string'
    siteName: 'string'
    subjectName: 'string'
    thumbprint: 'string'
    valid: bool
  }
}

Property values

certificates

Name Description Value
type The resource type

For Bicep, set this value in the resource declaration.
'Microsoft.Web/certificates'
apiVersion The resource api version

For Bicep, set this value in the resource declaration.
'2015-08-01'
name The resource name string (required)

Character limit: 1-260

Valid characters:
Can't use:
/

Can't end with space or period.
location Resource Location string (required)
tags Resource tags Dictionary of tag names and values. See Tags in templates
kind Kind of resource string
properties CertificateProperties

CertificateProperties

Name Description Value
cerBlob Raw bytes of .cer file string
expirationDate Certificate expiration date string
friendlyName Friendly name of the certificate string
hostingEnvironmentProfile Specification for a hostingEnvironment (App Service Environment) to use for this resource HostingEnvironmentProfile
hostNames Host names the certificate applies to string[]
issueDate Certificate issue Date string
issuer Certificate issuer string
password Certificate password string
pfxBlob Pfx blob string
publicKeyHash Public key hash string
selfLink Self link string
siteName App name string
subjectName Subject name of the certificate string
thumbprint Certificate thumbprint string
valid Is the certificate valid? bool

HostingEnvironmentProfile

Name Description Value
id Resource id of the hostingEnvironment (App Service Environment) string
name Name of the hostingEnvironment (App Service Environment) (read only) string
type Resource type of the hostingEnvironment (App Service Environment) (read only) string

Quickstart templates

The following quickstart templates deploy this resource type.

Template Description
Create and assign a standard App Service Certificate

Deploy to Azure
Creates a standard App Service Certificate, verifies it using an App service App and creates SSL bindings once the certificate is ready
Create and assign a wildcard App Service Certificate

Deploy to Azure
Creates a wildcard App Service Certificate, verifies it using an App service Domain and creates SSL bindings on an App Service App once the certificate is ready
Create a App Services Managed Certificate

Deploy to Azure
Create Managed Certificate (Free) APEX (root domain) for WebApp
SSL certificate for an ILB ASE or an ILB ASE v2

Deploy to Azure
Configures the default SSL certificate for an ILB ASE or an ILB ASE v2
Web App integration with Key Vault

Deploy to Azure
Deploy a Web App certificate from Key Vault secret and use it for creating SSL binding
Web App with a custom domain and optional SSL binding

Deploy to Azure
Create a web app and with a custom domain and optionally add SSL certificate for https encryption.