Blog

Sitecore things

Sitecore best practices, architectures, EXM, SPEAK...

Renewing a Certificate in Azure Key Vault

I recently needed to renew a certificate stored in Azure Key Vault. Below are the steps I followed:

  1. Create a new certificate version in Azure Key Vault.
  2. Download the CSR (Certificate Signing Request) and send it to your Certificate Authority (CA).
  3. After receiving the bundle .pem file from the CA, open it in a text editor and remove everything between
    -----BEGIN CERTIFICATE----- and -----END CERTIFICATE-----
    (Azure does not accept those additional certificate blocks).
  4. Merge the signed request in Azure Key Vault using the cleaned-up .pem file.
  5. Download the renewed PEM file from Key Vault and convert it to a .pfx using OpenSSL: openssl pkcs12 -export -out new.pfx -in new.pem -inkey new.pem