{"id":1334,"date":"2015-05-21T00:59:04","date_gmt":"2015-05-21T08:59:04","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=1334"},"modified":"2021-01-26T09:13:15","modified_gmt":"2021-01-26T17:13:15","slug":"install-ssl-certificate-on-microsoft-azure-for-an-application","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/install-ssl-certificate-on-microsoft-azure-for-an-application\/","title":{"rendered":"Install SSL Certificate on Microsoft Azure for an Application"},"content":{"rendered":"

Steps to install SSL Certificate on Microsoft Azure for an Application<\/h2>\n

\"Microsoft<\/p>\n

Step 1: Buy SSL Certificate & Generate CSR<\/h3>\n

First, you must purchase the SSL Certificate from a trusted Certificate Authority such as Symantec, Comodo, GeoTrust, Thawte or RapidSSL.<\/p>\n

After purchasing, proceed with generating the Certificate Signing Request (CSR) on your server with the correct certificate information (i.e. common name, organization, key size, etc.). Once you\u2019re done and the corresponding private key is saved in a safe location, continue with generating the certificate with the CSR and submit your information to the issuing Certificate Authority for processing.<\/p>\n

Note: While generating CSR please select encryption as 2048 bit.<\/strong><\/span><\/p>\n

Step 2: Extract\/Copy Certificate files on Server<\/h3>\n

After the validation process is completed, the issuing Certificate authority will email you the SSL certificate in a *.zip file. Download that file and extract all on your server directory where you wish to save all your certificate files.<\/p>\n

Step 3: Azure Service Definition & Configuration file modification<\/h3>\n

To use the SSL certificate, your Application must be properly configured and the HTTPS endpoint is added. In order to configure the app & add HTTPS endpoint, you need to update the service definition and configuration file.<\/p>\n

Service Definition File<\/strong><\/p>\n

1.<\/strong> Open the service definition file in your development environment and add the Certificates section below using the WebRole tag.<\/p>\n

<WebRole name=\"CertificateTesting\" vmsize=\"Small\">\r\n...<\/pre>\n
<Certificates><\/pre>\n
<Certificate name=\"SampleCertificate\"<\/pre>\n
storeLocation=\"LocalMachine\"<\/pre>\n
storeName=\"Symantec\" \/><\/pre>\n
<\/Certificates><\/pre>\n
...<\/pre>\n
<\/WebRole><\/pre>\n
 <\/p>\n
Here in this Certificates section, you can find the name of the certificate, name of the store, and the location of the certificate.<\/p>\n
 <\/p>\n
2.<\/strong> Here, in service definition file; to enable HTTPS, you need to add an InputEndpoint<\/strong> element inside the Endpoint<\/strong> section using the following piece of Code.<\/p>\n
<WebRole name=\"CertificateTesting\" vmsize=\"Small\"><\/pre>\n
...<\/pre>\n
<Endpoints><\/pre>\n
<InputEndpoint name=\"HttpsIn\" protocol=\"https\" port=\"443\"<\/pre>\n
certificate=\"SampleCertificate\" \/><\/pre>\n
<\/Endpoints><\/pre>\n
...<\/pre>\n
<\/WebRole><\/pre>\n
 <\/p>\n
3.<\/strong> To map the endpoint with HTTPS binding<\/strong>, you need to add a Binding<\/strong> element into site section using the following piece of code.<\/p>\n
<WebRole name=\"CertificateTesting\" vmsize=\"Small\"><\/pre>\n
...<\/pre>\n
<Sites><\/pre>\n
<Site name=\"Web\"><\/pre>\n
<Bindings><\/pre>\n
<Binding name=\"HttpsIn\" endpointName=\"HttpsIn\" \/><\/pre>\n
<\/Bindings><\/pre>\n
<\/Site><\/pre>\n
<\/Sites><\/pre>\n
...<\/pre>\n
<\/WebRole><\/pre>\n
 <\/p>\n
Server Configuration File<\/h4>\n
Open your service configuration (CSCFG) file \u201cServerConfiguration.Cloud.cscfg\u201d and add a certificate section using Root tag, copy following piece of code.<\/p>\n
<Role name=\"Deployment\"><\/pre>\n
...<\/pre>\n
<Certificates><\/pre>\n
<Certificate name=\"SampleCertificate\"<\/pre>\n
thumbprint=\"9427befa18ec6865a9ebdc79d4c38de50e6316ff\"<\/pre>\n
thumbprintAlgorithm=\"sha2\" \/><\/pre>\n
<\/Certificates><\/pre>\n
...<\/pre>\n
<\/Role><\/pre>\n
Note: Replace the thumbprint<\/strong> value with your value here, and keep thumbprintAlgorithm<\/strong> as SHA-2<\/strong>.<\/p>\n
Step 4: \u2018Package and Certificate\u2019 Upload<\/h3>\n
Use Azure Management Portal to Upload Package and Certificate. Your HTTPS endpoint has been added & deployment package updated.<\/p>\n
1.<\/strong> Open your Azure Management Portal<\/strong> and Login<\/p>\n
2.<\/strong> Click on New <\/strong>\u226bCloud Service <\/strong>\u226bCustomer Care<\/strong><\/p>\n
3.<\/strong> Now in the Create a Cloud Service <\/strong>section, enter the values of URL, region\/affinity group, and subscription. Please make sure the \u201cDeploy a cloud service package now\u201d<\/strong> is checked.<\/p>\n
4.<\/strong> Now click the Next<\/strong><\/p>\n
5.<\/strong> In the Publish your cloud service<\/strong> field, enter Deployment Name, browser your package & configuration location, select PRODUCTION<\/strong> as an environment and then press the Next<\/strong> Make sure \u2018Add certificates now<\/strong>\u00b4&\u2018Deploy even if one or more roles contain a single instance\u2019<\/strong> options are checked.<\/p>\n
6.<\/strong> Add certificate dialog will display; here you need to enter the location of your SSL certificate and its password. Now click the Attach Certificate<\/strong><\/p>\n
7.<\/strong> In ATTACHED CERTIFICATES<\/strong> field your SSL certificate will be listed.<\/p>\n
8.<\/strong> Now to create your cloud service click on the complete<\/strong> button<\/p>\n
9.<\/strong> Once the deployment reaches to the ready<\/strong> status you\u2019ll be able to move on to the next step.<\/p>\n
Step 5: Connect to the role instance by making use of HTTPS<\/h3>\n
Now your deployment is ready & actively running on Azure which means you can connect to it via HTTPS.<\/p>\n
1.<\/strong> In your Azure Management Portal<\/strong>, select the deployment you have created and then click the URL located under SITE URL<\/strong>.<\/p>\n
2.<\/strong> Now in your web browser, modify the URL from HTTP to HTTPS and press enter to visit the page.<\/p>\n
Note:<\/strong> If you want to use SSL for a staging deployment instead of a production deployment, you’ll first need to determine the URL used for the staging deployment. Deploy your cloud service to the staging environment without including a certificate or any certificate information. Once deployed, you can determine the GUID-based URL, which is listed in the management portal’s Site URL<\/strong>\u00a0field. Create a certificate with the common name (CN) equal to the GUID-based URL (for example, 32818777-6e77-4ced-a8fc-57609d404462.cloudapp.net<\/strong>), use the management portal to add the certificate to your staged cloud service, add the certificate information to your CSDEF and CSCFG files, repackage your application, and update your staged deployment to use the new package and CSCFG file.<\/em><\/p>\n
Important Resources<\/h3>\n