Renew Application Gateway certificates
At some point, you'll need to renew your certificates if you configured your application gateway for TLS/SSL encryption.
You can renew a certificate associated with a listener using either the Azure portal, Azure PowerShell, or Azure CLI:
To renew a listener certificate from the portal, navigate to your application gateway listeners. Select the listener that has a certificate that needs to be renewed, and then select Renew or edit selected certificate.
Upload your new PFX certificate, give it a name, type the password, and then select Save.
This article has been updated to use the Azure Az PowerShell module. The Az PowerShell module is the recommended PowerShell module for interacting with Azure. To get started with the Az PowerShell module, see Install Azure PowerShell. To learn how to migrate to the Az PowerShell module, see Migrate Azure PowerShell from AzureRM to Az.
To renew your certificate using Azure PowerShell, use the following script:
$appgw = Get-AzApplicationGateway ` -ResourceGroupName <ResourceGroup> ` -Name <AppGatewayName> $password = ConvertTo-SecureString ` -String "<password>" ` -Force ` -AsPlainText set-AzApplicationGatewaySSLCertificate -Name <oldcertname> ` -ApplicationGateway $appgw -CertificateFile <newcertPath> -Password $password Set-AzApplicationGateway -ApplicationGateway $appgw
az network application-gateway ssl-cert update \ -n "<CertName>" \ --gateway-name "<AppGatewayName>" \ -g "ResourceGroupName>" \ --cert-file <PathToCerFile> \ --cert-password "<password>"
To learn how to configure TLS Offloading with Azure Application Gateway, see Configure TLS Offload