How to use in Azure services

• App Service (Web Apps / Functions / Containers)
• Azure Container Apps
• Application Gateway v2
• Azure CDN / Front Door (Classic) / Front Door
• API Management
• Virtual Machines
• Other services

App Service (Web Apps / Functions / Containers)

You can import the Key Vault certificate to the App Service by opening the TLS/SSL Settings from Azure Portal and selecting the Import Key Vault Certificate button from the Private Key Certificate (.pfx).

After importing, the App Service will automatically check for certificate updates.

• Import a certificate from Key Vault - Add and manage TLS/SSL certificates - Azure App Service | Microsoft Docs

Azure Container Apps

• Import certificates from Azure Key Vault to Azure Container Apps | Microsoft Learn

Application Gateway v2

• TLS termination with Azure Key Vault certificates | Microsoft Docs

Front Door (Standard / Premium)

Front Door (Standard / Premium) will now automatically deploy the latest version of the certificate when the Key Vault certificate is updated. Selecting Latest as the Key Vault certificate version will automatically update it.

• Configure HTTPS for your custom domain - Azure Front Door | Microsoft Docs

API Management

• Configure custom domain name for Azure API Management instance - Azure API Management | Microsoft Docs

Virtual Machines

• Azure Key Vault VM Extension for Windows - Azure Virtual Machines | Microsoft Docs
• Azure Key Vault VM Extension for Linux - Azure Virtual Machines | Microsoft Docs
• Tutorial: Secure a web server with TLS/SSL certificates - Azure Virtual Machines | Microsoft Docs

Other services

The issued certificate can be downloaded from Key Vault and used elsewhere, either in Azure or outside Azure.

• Export certificates from Azure Key Vault | Microsoft Docs