Install SSL on Microsoft Azure
This tutorial shows how to secure your Azure App Service with a custom SSL certificate from EchoSSL. This requires an App Service plan of Basic tier or higher.
Prerequisites
First, get your certificate files from EchoSSL. You'll also need OpenSSL to convert your files into a single PFX file, which Azure requires.
Step-by-Step Installation
-
Create the PFX File
Azure needs a.pfx
file containing your certificate and private key. Open a command prompt and run this OpenSSL command, which will prompt you to create an export password.openssl pkcs12 -export -out your_domain.pfx -inkey private.key -in certificate.crt -certfile ca_bundle.crt
-
Navigate to your App Service in Azure
Log in to the Azure Portal and go to your App Service resource. -
Go to TLS/SSL Settings
In the left navigation menu, find and select TLS/SSL settings. -
Upload Certificate
Select the Private Key Certificates (.pfx) tab and click + Upload Certificate. -
Provide PFX File and Password
Upload theyour_domain.pfx
file you created and enter the password for it. Click Upload. -
Bind the Certificate
Navigate to the Bindings tab. Click + Add TLS/SSL Binding. -
Configure the Binding
In the new pane, select your custom domain. From the "Private Certificate Thumbprint" dropdown, choose the certificate you just uploaded. Select SNI SSL as the TLS/SSL Type. Click Add Binding.
Verify the Installation
After binding, your site should be secure. You can confirm this by visiting your site with https://
or by using our free SSL Certificate Checker tool for a detailed report.
Success! Your Azure App Service is now secured. Browsers will show a padlock icon for your custom domain.