How to resolve imported certificate is a self signed certificate error in AFD even though it is a certificate issued by a private CA?

Sachitha Chithralekha 0 Microsoft Employee

First I created CA in key vault (issuer is OnecertV2-PrivateCA)

then generated certificate with the domain name

but when I try to add this certificate in AFD it gives the following error:
'cannot add secret as self signed certificate is not allowed in BYOC'

but it is clearly not a self signed cert -it is issued by onecert-privateca.
How to resolve this?
error.jpg

Sachitha Chithralekha 0 Reputation points Microsoft Employee

2024-12-24T05:00:13.3066667+00:00

This RG is in AME tenant.
Sachitha Chithralekha 0 Reputation points Microsoft Employee

2024-12-24T05:00:56.66+00:00

This RG is in AME tenant.
Navya 14,040 Reputation points Microsoft Vendor

2024-12-26T21:10:54.0366667+00:00

Hi @Sachitha Chithralekha

Thank you for posting your question on Microsoft Q&A.

Based on the information you provided, it appears that AFD is treating the certificate you generated as a self-signed certificate, even though it was issued by OnecertV2-PrivateCA.

1.To confirm whether the certificate is self-signed, please check the issuer and subject values. If both values match, then the certificate is indeed self-signed. Need to create private certificate.

2.Also, it might be the root CA certificates are self-signed. To resolve this issue, you may need to add the CA to your trusted CA list. Here is a document that explains how to do this: https://ubuntu.com/server/docs/install-a-root-ca-certificate-in-the-trust-storethen try to add the certificate in AFD

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

Your answer