Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
If you received a notification that the Transport Layer Security and Secure Sockets Layer (TLS/SSL) IP address of your Azure App Service app is changing, follow the instructions in this article to release the existing TLS/SSL IP address and assign a new one.
Note
Service endpoints aren't currently supported when enabling IP based SSL on App Service TLS/SSL bindings.
Release TLS/SSL IP addresses and assign new ones
First, release TLS/SSL IP addresses and assign new ones:
Sign in to the Azure portal.
Search for and select App Services, then select your App Service app from the list.
Under Settings in the sidebar menu, select Custom domains.
In the Custom domains section, look for the domain with the Binding type of IP based SSL. Select the three ellipses for that domain and select Update binding.
In the editor that opens, choose SNI SSL for the TLS/SSL type and select Update.
In the Custom domains section, select the same host name record. In the editor that opens, this time choose IP based SSL for the TLS/SSL type and select Update. When you see the operation success message, you've acquired a new IP address.
If an A record (DNS record pointing directly to your IP address) is configured in your domain registration portal (non-Microsoft DNS provider or Azure DNS), replace the existing IP address with the newly generated one. You can find the new IP address by following the instructions in the next section.
Find the new SSL IP address in the Azure portal
Next, Find the new SSL IP address in the Azure portal.
Wait a few minutes, then select your app in App Services.
Under Settings in the sidebar menu, select Properties, and find the section labeled Virtual IP address.
Copy the IP address and reconfigure your domain record or IP mechanism.