You are configuring a Standard availability test in Azure Application Insights to monitor a secure API endpoint that requires client certificate authentication (mutual TLS). The API is hosted on an external system that does not support Microsoft Entra ID authentication.
You need to ensure that the availability test can authenticate with the API and successfully monitor its availability.
Which configuration should you perform in the Application Insights availability test settings?
- Enable SSL client certificates, and upload the client certificate as a password-protected PFX file.Answer
- BEnable a system-assigned managed identity for the Application Insights resource and assign it the required permissions on the target API.
- CAdd the client certificate to an Azure Key Vault and configure a Key Vault reference in the custom headers of the availability test.
- DStore the certificate in Azure Key Vault and configure a Key Vault Access Policy to grant the target API's service principal permission to retrieve it.
Answer
Enable SSL client certificates, and upload the client certificate as a password-protected PFX file.
To monitor an endpoint requiring client certificate authentication using an Application Insights Standard availability test, you must enable the SSL client certificates option and upload the client certificate in PFX format along with its password. This allows the Application Insights service to authenticate with the target API during the availability checks.
Step-by-Step Solution
Key Concept
Configuring client certificate authentication for Application Insights Standard availability tests