上传 Azure Service Management 证书Upload an Azure Service Management Certificate

管理证书允许使用 Azure 提供的经典部署模型进行身份验证。Management certificates allow you to authenticate with the classic deployment model provided by Azure. 许多程序和工具(如 Visual Studio 或 Azure SDK)会使用这些证书来自动配置和部署各种 Azure 服务。Many programs and tools (such as Visual Studio or the Azure SDK) use these certificates to automate configuration and deployment of various Azure services.

警告

请注意!Be careful! 这些类型的证书允许使用它们进行身份验证的任何人管理与其相关联的订阅。These types of certificates allow anyone who authenticates with them to manage the subscription they are associated with.

若要深入了解 Azure 证书(包括创建自签名的证书)的详细信息,请参阅 Azure 云服务的证书概述If you'd like more information about Azure certificates (including creating a self-signed certificate), see Certificates overview for Azure Cloud Services.

还可以使用 Azure Active Directory 对客户端代码进行身份验证,以用于自动化目的。You can also use Azure Active Directory to authenticate client-code for automation purposes.

注意: 必须是订阅的共同管理员,才能在“管理证书”下执行任何操作。Note: You must be a Co-administrator on the subscription to perform any operations under Management Certificates. 了解有关如何在新的 Azure 门户中添加或删除共同管理员Learn More on how to Add or Remove Co-Admins from new Azure Portal

上传管理证书Upload a management certificate

创建管理证书后(仅使用公钥的 .cer 文件),可将其上传到门户。Once you have a management certificate created, (.cer file with only the public key) you can upload it into the portal. 当该证书在门户中可用时,任何拥有匹配证书(私钥)的人都可通过 Management API 连接并访问与订阅相关联的资源。When the certificate is available in the portal, anyone with a matching certificate (private key) can connect through the Management API and access the resources for the associated subscription.

  1. 登录到 Azure 门户Log in to the Azure portal.

  2. 在底部的 Azure 服务列表中,单击“所有服务”,然后在“常规”服务组中选择“订阅”。Click All services at the bottom Azure service list, then select Subscriptions in the General service group.

    “订阅”菜单

  3. 请确保选择要与证书关联的相应订阅。Make sure to select the correct subscription that you want to associate with the certificate.

  4. 选择了正确的订阅后,点按“设置”组中的“管理证书”。After you have selected the correct subscription, press Management certificates in the Settings group.

    设置

  5. 点按“上传”按钮。Press the Upload button.

    在“证书”页中上传

  6. 填写对话框信息并点按“上传”。Fill out the dialog information and press Upload.

    设置

后续步骤Next steps

将管理证书与订阅关联之后,(在本地安装匹配的证书后)可以编程的方式连接到经典部署模型 REST API 并自动执行各种与该订阅关联的 Azure 资源。Now that you have a management certificate associated with a subscription, you can (after you have installed the matching certificate locally) programmatically connect to the classic deployment model REST API and automate the various Azure resources that are also associated with that subscription.