Skip to content

Azure API Management

Use this procedure to provision a certificate from Certificate Manager - SaaS to an Azure API Management machine.

  1. Sign in to Certificate Manager - SaaS.

  2. Click Installations > Machines.

  3. Click the more options more options button at the right end of the Azure API Management machine's row, and then select Provision.

  4. In Search a certificate by name, expiration or fingerprint, search for and select the certificate you want to provision.

    Verify that you selected the correct certificate by reviewing the Subject DN, Validity, and Certificate SHA1 Fingerprint.

    Note

    Only Certificate Manager - SaaS-generated and user-imported certificates with private keys can be provisioned. The certificate's common name (CN) or subject alternative name (SAN) must match the custom domain hostname you specify in the next step.

  5. In the Hostname field, enter the hostname of the Azure API Management custom domain where you want to install the certificate (for example, api.example.com).

  6. From the Domain Type drop-down, select the type of custom domain endpoint:

    • Gateway – The primary API gateway endpoint (default)
    • Developer Portal – The developer portal endpoint
    • Management – The management API endpoint
    • Source Control (SCM) – The source control management endpoint
    • Configuration API – The configuration API endpoint

  7. From the Certificate Source drop-down, select Custom (Uploaded).

    Note

    If a custom domain is already configured with a certificate from Azure Key Vault, provisioning to that hostname replaces the Key Vault reference with the uploaded (Custom) certificate. Key Vault-backed certificates on other (non-targeted) domains are flagged during discovery and left unchanged.

  8. To save without pushing the certificate, turn off Push certificate on save.

  9. Click Save.

    Want to schedule your provisions?

    Schedule your provisions daily, weekly, or monthly. Learn more

After saving, the certificate is converted to Azure's required format and submitted to the specified custom domain. The connector reports success once Azure accepts the update. The certificate installation completes asynchronously. All other custom domains on the same API Management instance are preserved.