question

PrivilegedSharvariHDesai-6921 avatar image
0 Votes"
PrivilegedSharvariHDesai-6921 asked brtrach-MSFT answered

clientCertEnabled to Allow in arm template

How do I set the Client Certification mode to "Allow" via Arm template? If I set to clientCertEnabled to true, it sets it to "Enabled", I want to set it to "Allow"

azure-webapps-ssl-certificates
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

brtrach-MSFT avatar image
0 Votes"
brtrach-MSFT answered

@PrivilegedSharvariHDesai-6921 Thank you for your question.

Allow is not one of the variables supported for this setting. Below are the two attributes that you can set for client certs and their possible variables.

  "clientCertEnabled": true/false,
     "clientCertMode": "Optional/Required",

You can view/edit these by inputting your values in the below URL for your web app.

https://resources.azure.com/subscriptions/<insertSubscritionIDHere>/resourceGroups/<insertResourceGroupNameHere>/providers/Microsoft.Web/sites/<insertSiteNameHere>;

You will then see these two values for your site listed here and can edit their values.

You can also edit these values in the portal for your web app by navigating Configuration> General settings > Incoming Client Certificate> Certificate exclusion paths

More information on TLS mutual authentication can be found here.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.