You plan to configure an Azure Application Gateway v2 to use an SSL certificate stored in an Azure Key Vault. You need to configure the components in the correct sequence to ensure that the Application Gateway can retrieve the certificate and secure incoming HTTPS traffic. Which sequence of steps should you perform?
- 1Create a user-assigned managed identity.
- 2Grant the managed identity get permissions for secrets in the Key Vault.
- 3Associate the managed identity with the Application Gateway.
- 4Configure the HTTPS listener on the Application Gateway to reference the Key Vault certificate.
Cevap
The correct sequence is to first create the user-assigned managed identity, then grant it secrets get permissions in the Key Vault, next associate the identity with the Application Gateway, and finally configure the HTTPS listener to reference the Key Vault certificate.
To configure an Application Gateway with an SSL certificate stored in Key Vault, you must first create a user-assigned managed identity. The identity must then be granted permissions to access Key Vault secrets (certificates are stored as secrets). After that, you associate the managed identity with the Application Gateway so it can use the identity. Finally, you configure the HTTPS listener to reference the certificate URI in Key Vault, which validates successfully because the gateway now has an identity with the required access.
Adım Adım Çözüm
Anahtar Kavram
Integrating Azure Application Gateway with Azure Key Vault using managed identities for SSL/TLS certificates.