You are configuring an Azure API Management (APIM) instance to connect to a backend service that requires mutual TLS (mTLS) authentication. You need to configure APIM to authenticate with the backend using a client certificate. Which two actions should you perform? (Select TWO.)
- Upload the client certificate to the Certificates store of the API Management instance.Answer
- Add the authentication-certificate policy to the inbound processing section of the API.Answer
- CAdd the authentication-certificate policy to the outbound processing section of the API.
- DCreate a system-assigned managed identity for the API Management instance and grant it access to the backend service.
Answer
To configure mutual TLS authentication with a backend service in Azure API Management, you must upload the client certificate to the API Management Certificates store and add the authentication-certificate policy to the inbound processing block of the API.
To authenticate with a backend service using a client certificate, you must first upload the certificate to the Certificates store of the API Management instance so that the gateway can reference it. Then, you must configure the inbound processing section of the API with the authentication-certificate policy, which instructs the gateway to use the uploaded certificate during the outbound call to the backend.
Step-by-Step Solution
Key Concept
Gateway-to-Backend Mutual TLS (mTLS) Authentication