Microsoft.Web certificates 2016-03-01
The certificates resource type can be deployed to: Resource groups.
To learn about resource group deployments, see Bicep or ARM template.
Template format
To create a Microsoft.Web/certificates resource, add the following Bicep or JSON to your template.
resource symbolicname 'Microsoft.Web/certificates@2016-03-01' = {
name: 'string'
location: 'string'
tags: {
tagName1: 'tagValue1'
tagName2: 'tagValue2'
}
kind: 'string'
properties: {
hostNames: [
'string'
]
keyVaultId: 'string'
keyVaultSecretName: 'string'
password: 'string'
pfxBlob: any()
serverFarmId: 'string'
}
}
Property values
certificates
| Name | Description | Value |
|---|---|---|
| type | The resource type For Bicep, set this value in the resource declaration. |
'Microsoft.Web/certificates' |
| apiVersion | The resource api version For Bicep, set this value in the resource declaration. |
'2016-03-01' |
| name | The resource name | string (required) Character limit: 1-260 Valid characters: Can't use: / Can't end with space or period. |
| location | Resource Location. | string (required) |
| tags | Resource tags. | Dictionary of tag names and values. See Tags in templates |
| kind | Kind of resource. | string |
| properties | Certificate resource specific properties | CertificateProperties |
CertificateProperties
| Name | Description | Value |
|---|---|---|
| hostNames | Host names the certificate applies to. | string[] |
| keyVaultId | Key Vault Csm resource Id. | string |
| keyVaultSecretName | Key Vault secret name. | string |
| password | Certificate password. | string (required) |
| pfxBlob | Pfx blob. | For Bicep, you can use the any() function. |
| serverFarmId | Resource ID of the associated App Service plan, formatted as: "/subscriptions/{subscriptionID}/resourceGroups/{groupName}/providers/Microsoft.Web/serverfarms/{appServicePlanName}". | string |
Quickstart templates
The following quickstart templates deploy this resource type.
| Template | Description |
|---|---|
Create and assign a standard App Service Certificate |
Creates a standard App Service Certificate, verifies it using an App service App and creates SSL bindings once the certificate is ready |
| Create and assign a wildcard App Service Certificate |
Creates a wildcard App Service Certificate, verifies it using an App service Domain and creates SSL bindings on an App Service App once the certificate is ready |
| Create a App Services Managed Certificate |
Create Managed Certificate (Free) APEX (root domain) for WebApp |
| SSL certificate for an ILB ASE or an ILB ASE v2 |
Configures the default SSL certificate for an ILB ASE or an ILB ASE v2 |
| Web App integration with Key Vault |
Deploy a Web App certificate from Key Vault secret and use it for creating SSL binding |
| Web App with a custom domain and optional SSL binding |
Create a web app and with a custom domain and optionally add SSL certificate for https encryption. |