Azure front door don't forward certificates?

AmosBurton 1

Hi,

I'm using an azure front door in front of an azure apim. The azure apim requires valid client certificates.
Now I'm sending a request to the azure front door but the azure apim can't see my certificate. So I guess the certificate is lost in the azure front door?

Is azure front door designed like this?

2 answers

suvasara-MSFT 10,006 Reputation points

2020-06-08T08:37:25.183+00:00

Greetings,

This might not be possible today as allowing Azure Front door to inject the client certificate into request header: X-ARR-ClientCert similar to App Services is not yet implemented and is been under triaged.

I would recommend you upvote this feature in the feedback section. All of the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.
Please sign in to rate this answer.

1 person found this answer helpful.
AmosBurton 1 Reputation point

2020-06-08T10:45:38.573+00:00

Do Azure AppGateway support it? I would like to take advantage of a WAF policy resource.

suvasara-MSFT 10,006 Reputation points

2020-06-08T13:18:09.75+00:00

AFAIK, AppGW too has this limitation for now and is a planned feature with no ETA available. Here is where you can provide you feedback.

Paco de la Cruz 11 Reputation points

2021-05-16T22:55:52.18+00:00

From mid May 2021, Application Gateway supports mTLS / client certificate authentication in preview, as announced here, meaning you can have App Gateway with WAF and client cert auth.

Azure Application Gateway now supports the ability to perform frontend mutual authentication. You can upload multiple client Certificate Authority (CA) certificate chains for Application Gateway to use for client authentication. You can choose to enable mutual authentication at a per listener level on your gateway, as well as choose to pass client authentication information to the backends through server variables.

HTH

gaur 211 Reputation points

2022-01-19T18:14:22.04+00:00

Is it now supported?
Azure front door and app gateway. @suvasara-MSFT

Kolbe, Matthias 1 Reputation point

2022-02-08T16:05:57.47+00:00

Hello @suvasara-MSFT ,

we'd have that business requirement as well.
Is there any update regarding the frontdoor implementation?

Greetings,
matthias
Sign in to comment
Wiesinger Richard 11 Reputation points

2022-03-25T18:19:34.96+00:00

Seems like this is still not implemented.
Here is the updated feedback link - if you would like to upvote...
Please sign in to rate this answer.

0 comments No comments
Sign in to comment