az functionapp config ssl

Configure SSL certificates.

Commands

az functionapp config ssl bind

Bind an SSL certificate to a function app.

az functionapp config ssl create

Create a Managed Certificate for a hostname in a function app.

az functionapp config ssl delete

Delete an SSL certificate from a function app.

az functionapp config ssl import

Import an SSL certificate to a function app from Key Vault.

az functionapp config ssl list

List SSL certificates for a function app.

az functionapp config ssl unbind

Unbind an SSL certificate from a function app.

az functionapp config ssl upload

Upload an SSL certificate to a function app.

az functionapp config ssl bind

Bind an SSL certificate to a function app.

az functionapp config ssl bind --certificate-thumbprint
                               --ssl-type {IP, SNI}
                               [--ids]
                               [--name]
                               [--resource-group]
                               [--slot]
                               [--subscription]

Examples

Bind an SSL certificate to a function app. (autogenerated)

az functionapp config ssl bind --certificate-thumbprint {certificate-thumbprint} --name MyFunctionApp --resource-group MyResourceGroup --ssl-type SNI

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

--ssl-type

The ssl cert type.

accepted values: IP, SNI

Optional Parameters

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the function app.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

az functionapp config ssl create

Create a Managed Certificate for a hostname in a function app.

az functionapp config ssl create --hostname
                                 --name
                                 --resource-group
                                 [--slot]
                                 [--subscription]

Examples

Create a Managed Certificate for $fqdn.

az functionapp config ssl create --resource-group MyResourceGroup --name MyWebapp --hostname $fqdn

Required Parameters

--hostname

The custom domain name.

--name -n

Name of the function app.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

az functionapp config ssl delete

Delete an SSL certificate from a function app.

az functionapp config ssl delete --certificate-thumbprint
                                 --resource-group
                                 [--subscription]

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

az functionapp config ssl import

Import an SSL certificate to a function app from Key Vault.

az functionapp config ssl import --key-vault
                                 --key-vault-certificate-name
                                 [--ids]
                                 [--name]
                                 [--resource-group]
                                 [--subscription]

Examples

Import an SSL certificate to a function app from Key Vault.

az functionapp config ssl import --resource-group MyResourceGroup --name MyFunctionApp --key-vault MyKeyVault --key-vault-certificate-name MyCertificateName

Import an SSL certificate to a function app from Key Vault using resource id (typically if Key Vault is in another subscription).

az functionapp config ssl import --resource-group MyResourceGroup --name MyFunctionApp --key-vault '/subscriptions/[sub id]/resourceGroups/[rg]/providers/Microsoft.KeyVault/vaults/[vault name]' --key-vault-certificate-name MyCertificateName

Required Parameters

--key-vault

The name or resource ID of the Key Vault.

--key-vault-certificate-name

The name of the certificate in Key Vault.

Optional Parameters

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the function app.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

az functionapp config ssl list

List SSL certificates for a function app.

az functionapp config ssl list --resource-group
                               [--query-examples]
                               [--subscription]

Examples

List SSL certificates for a function app. (autogenerated)

az functionapp config ssl list --resource-group MyResourceGroup

Required Parameters

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

--query-examples

Recommend JMESPath string for you. You can copy one of the query and paste it after --query parameter within double quotation marks to see the results. You can add one or more positional keywords so that we can give suggestions based on these key words.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

az functionapp config ssl unbind

Unbind an SSL certificate from a function app.

az functionapp config ssl unbind --certificate-thumbprint
                                 [--ids]
                                 [--name]
                                 [--resource-group]
                                 [--slot]
                                 [--subscription]

Required Parameters

--certificate-thumbprint

The ssl cert thumbprint.

Optional Parameters

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the function app.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

az functionapp config ssl upload

Upload an SSL certificate to a function app.

az functionapp config ssl upload --certificate-file
                                 --certificate-password
                                 [--ids]
                                 [--name]
                                 [--resource-group]
                                 [--slot]
                                 [--subscription]

Examples

Upload an SSL certificate to a function app. (autogenerated)

az functionapp config ssl upload --certificate-file {certificate-file} --certificate-password {certificate-password} --name MyFunctionApp     --resource-group MyResourceGroup

Required Parameters

--certificate-file

The filepath for the .pfx file.

--certificate-password

The ssl cert password.

Optional Parameters

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

Name of the function app.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--slot -s

The name of the slot. Default to the productions slot if not specified.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.