Certificate for Azure Websites in the VNET

Hi,
I created a point-to-site connectivity from Azure websites to existing VNET. My Questions are:
1. Eventhough I add more than one website the client count in the Dashboard of the VNET is not showing increment more than 1. What is the reason?
2. How do I change the certificate used by the Azure website that is getting generated while connecting to VNET through point-to-site? It seems it all the websites connecting the VNET using same auto generated certificate. How and Why?
Thanks in Advance,
With Best Regards,
Kasinath

Hi Kasinath,
Where did you create the websites? Are they in the same web hosting plan? Based on my experience, only websites are running on a web hosting plan that’s in the ‘Standard’ pricing tier can be connected to a virtual network. A website can only
be connected to one network at a time and you can only have up to 5 networks configured in your web hosting plan.
In addition, the system will then create a certificate to authenticate with your VNET if it is the first website in your subscription to establish a connection to that network. Why did you want to change the certificate?
The link below maybe helpful to you:
Integrate your Azure Website with an Azure Virtual Network
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

Best Practice while configuring Traffic Manager for Azure Website

Hi Team,
I want to understand What is the best practice while we configure traffic manager for Azure website.
To give you the base, Here let me explain my requirement. I have one website which 40% target audiences would be East US, while 40% would be UK and rest 20% would be from Asia-pacific.
Now, What I want is Failover + Performance based Traffic Manager Configuration.
My thinking:
1) we need to create 1 website with 2 instances in each region (east us, east asia, west us for an example). so, total 3 deployment of website. (give region based url for the website)
2) create traffic manager based on performance and add 3 of those instances. that would become website-tmonperformance
3) create traffic manager based on failover and add 3 of those instances. that would become website-tmonfailover
4) create traffic manager and ?? don't know the criteria but add both above traffic manager here and take your final url for end user.
I am not sure (1) this may be the right approach or not (2) if this is right, in the 4th step which criteria we should select while creating final traffic manager round-robin/ performance/ failover?
after all these if use try to access site from US.. traffic manager will divert that to US Data-Centre or it will wait for failover and till that it will be served from east-asia if in configuration, east-asia is my 1st instance?
Regards, Brijesh Shah

Hi Jonathan,
Thanks for your quick reply. actually question is bit different. Let me explain you different way.
I was asking for recommendation from Azure Traffic Manager team. whether my understanding is correct or not.We want Performance with Failover.
So, One azure website we have: take an example todoapp. I deployed that in 3 different region. now, I want to have performance based routing as well as failover based routing. but obviously I can't give two URL to my end user. so, at the top of that I will
require one more traffic manager. So,
step 1: I will create one traffic manager with performance criteria named: TMForPerformance.trafficmanager.com where I will add all those 3 instances (all are from different region so, it want create any issue.)
step 2: I will create one more traffic manager with failover criteria named: TMForFailover.trafficmanager.com where I will add all those 3 instances (all are from different region so, it want create any issue.)
step 3: I will create one final traffic manager with performance criteria named: todoapp.trafficmanager.com where I will add these two traffic manager instead of 3 different region's website.
Question 1) Is it correct structure if we want to achieve Performance with Failover or Is there any better solution?
Question 2) in step 3, what criteria we should select? performance/ round robin/ failover
Regards, Brijesh Shah

I have a really really big problem to my iphone icloud please help me i could send you my birth certificate for confirmation that im the real user please help me

i have a really really big problem to my iphone icloud please help me i could send you my birth certificate for confirmation that im the real user please help me apple.corp and please tell me if this is not possible to be done it almost a month that i cant use my iphone.
thank you for those who read this
<Email Edited by Host>

Remove your email address. This is a public website, and you are addressing thousands of strangers.
After doing that, tell us what your issue actually is. This is a user-to-user technical forum. You are not addressing Apple here.

Is there a list of best practices for Azure websites?

Hi all;
I was talking with a Sql Server expert today and learned that Azure Sql Server can take up to a minute to respond to a query that normally takes a fraction of a second. This is one of those things where it's really valuable to learn it when architecting as
opposed to when we go live.
Websites are not Sql Server (obviously) but that led to the question - Is there a list of best practices for Azure Websites? If so, what are they?
We will be the website in multiple datacenters and using traffic manager to point people to the right one. The website will run as a REST server using Web API 2, mostly for license checks from our app running on corporate Exchange servers. And a small part
will be for javascript based web pages used for account CRUD.
thanks - dave
What we did for the last 6 months -
Made the world's coolest reporting & docgen system even more amazing

sorry I was not sure if you were using a web server or what?
One other idea out of the slow cooker is to use a dedicated web server with SQL server running beside IIS
If you are using the standard web sites, then the SQL option is about as slow as FTP uploads, very slow
I have considered time of day too, and it seems Azure is less loaded early in the AM
Corsair Carbide 300R with TX850V2 Asus M5A99FX PRO R2.0 CFX/SLI AMD Phenom II 965 C3 Black Edition @ 4.0 GHz G.SKILL RipjawsX DDR3-2133 8 GB EVGA GTX 660 Ti FTW Signature 2 (GK104 Kepler) Asus PA238QR
IPS LED HDMI DP 1080p ST2000DM001 & Windows 8.1 Professional x64 Microsoft Wireless Desktop 2000 & Wacom Bamboo CHT470M Place your rig specifics into your
signature like I have, makes it 100x easier to understand! <a href="http://hardcore-games.azurewebsites.net/" target="_blank">Hardcore Games</a> Legendary is the Only Way to Play!

Why are some websites, such as the FAFSA (federal financial aid for students) website or the BNY Mellon website, denying access to users running Firefox versions newer than 3.6?

Why are some websites that are important to many people, such as the FAFSA (federal financial aid for students) website or the Bank of New York Mellon website, not permitting access to computers running Firefox versions newer than 3.6 when Mozilla is claiming that 5.0 is more stable and secure?
The following information was displayed in regards to this issue -
https://fafsa.ed.gov/FAFSA/app/errors?page=incompatibleBrowser
"An Incompatible Browser Has Been Detected:
Your Web browser is not supported by our Web site. You must use a Compliant Web Browser - Standard* to view our site properly. We recommend you upgrade to the latest version of your browser according to your Operating System.
Supported Mozilla Firefox browsers:
Windows XP - Mozilla Firefox 3.5.x and 3.6.x
Windows Vista - Mozilla Firefox 3.5.x and 3.6.x
Windows 7 - Mozilla Firefox 3.5.x and 3.6.x
Macintosh Operating System 10.5 - Mozilla Firefox 3.5.x and 3.6.x
Macintosh Operating System 10.4 - Mozilla Firefox 3.6
*Compliant Web Browser - Standard
For the past few years, every major Web browser released has been built around a set of open standards designated by the World Wide Web Consortium, a non-profit organization charged with overseeing the continuing development of the Web. What this means is that one piece of code now looks the same on every modern browser, whether it be Internet Explorer, Firefox, Safari, Opera, or others. The majority of our users are using these modern browsers, so we can present content which is optimized for them. "

That is a question for those websites to answer. Firefox 4.0 was released almost 4 months ago, IMO more than enough time for those 2 websites to verify that Firefox 4 & 5 are compliant with W3C standards.
To be able to access that FAFSA website, my advice is to install the Portable Firefox 3.6.19 version to your hard drive. It won't affect your other Firefox installation. 
http://portableapps.com/apps/internet/firefox_portable/localization#legacy36

Can you change the FTP URL for Azure Websites and link to a Domain Name FTP?

I have created an Azure Website, and have regisetered the correct Domain Name details for the site. What i want to understand is can i do the same for the FTP address via Azure?
Rather than use the default ftp://waws-XXX-XXX.ftp.azurewebsites.windows.net/ i want to change to be FTP.<Domain Name>.comi do not see the option to do this via Azure?
would i have to create a CNAME on my domain registrar to deal with this instead?

are you able to ftp to domainname.ext?
if you can ftp to domainname.ext and instead you want to ftp to FTP.domainname.ext then yes you need dns map

Invalid security certificate for all websites on Mac (sec_error_unknown_issuer)

Since connecting to my university network, a message in Firefox systematically keeps popping up for every website. I'm now using internet somewhere else - where I've been connected many times before without a problem - and firefox keeps annoyingly giving me this message.
This is the message: cs-700-main(...):443 uses an invalid security certificate. This certificate is not trusted because the issuer certificate is unknown. Sec_error_unknown_issuer.
Apparently the organization issuing the certificate is 'vernier networks, inc.'.
I am using a Macbook bought recently and didn't have any problems until I connected to my university network. I'm not really familiar with Macs, so I don't really know what to do at this point to fix this. Apparently, people have had this problem before but no one has been able to help them. Can anyone help? This is really frustrating and it means I have to turn to Safari or Google Chrome!!
Thanks

It is related to browser settings do,
Firefox -> Tools -> Advanced -> view certificates -> servers -> Add exceptions
and add the your url in that dialogue box.

Over 10% downtime for Azure Website Shared?

My monitoring software is reporting about 11.52% downtime over the last 12 days for our Azure Website that is on a "Shared" plan. Is this normal for Azure? It seem something is wrong, most of other hosts guarantee at least 99% uptime.

Hi,
I would request you to monitor using Monitor management page and check if it shows the same thing, here is the link:
http://azure.microsoft.com/en-in/documentation/articles/web-sites-monitor/
Regards,
Azam Khan

Azure CDN for Azure Website

I have an Azure Website and I would like to serve some of it via an Azure CDN. Apparently, this used to be possible by using a /cdn folder in an Azure Hosted Service however, you cannot create these any more.
If I try and create a Cloud Service (which replaced the Hosted Service), I just end up creating an Azure Web Site and you cannot connect a CDN to it.
So, my question is: How can I connect an Azure CDN to an Azure website?

Hi,
CDN in general has not been changed. Some old tutorials such as
http://blog.smarx.com/posts/using-the-windows-azure-cdn-for-your-web-application would still work. Please note it does not stand by website yet. It has to use web role. When you creating a cloud service, it works as a container. You can upload your
web roles to it. Cloud service is not website. In addition, at the moment it is needed to use the old Silverlight to manage CDN. We're in the progress to enable CDN management in the new portal, as described in the old portal:
Windows Azure CDN management experience will be available in the new Windows Azure Management Portal in the next couple months. Once this experience has been moved over, sometime this summer, the Silverlight Portal will be decommissioned. At that point,
you will no longer be able to use this Portal to manage your CDN assets and will only be able to do so through the new Portal.
Best Regards,
Ming Xu
Ming Xu
MSDN Community Support | Feedback to us
Develop and promote your apps in Windows Store
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Certain Http Server Errors not visible in logs for Azure Websites

I noticed that a lot of times (but not every time) Http Server Errors on my Azure Website (an ASP.NET MVC app) don't show up in any logs, although they are recognized by Azure. E.g. I get alerts that Http Server Error count > 5 in the last 15 minutes,
I see the error count on the Portal under Monitoring/Requests and errors however these errors are not visible in my application's own logs or in the eventlog.xml. Thus I also can't troubleshoot them.
Now I'm not totally sure (and can't find any hints about) what exactly "Http Server Errors" mean in Azure terminology but since 4xx errors are handled separately by alerts I'd guess these are 5xx errors. If indeed then I don't understand why there
are apparently errors happening that are not visible at least in the event log?

Hi Zoltán Lehóczky,
For your issue ,I suggest that you could try to enable site diagnostics and application diagnostics in Azure Management Portal.
In site diagnostics ,it will logs Detailed Error Logging which logs detailed information for HTTP status codes that indicate a failure (status 400 or greater).
Then you could access the folder "/LogFiles/DetailedErrors" via Ftp to check Detailed Error Logs which provide any HTTP errors have occurred.
For more information ,I suggest that you could refer to the link below:
http://azure.microsoft.com/en-us/documentation/articles/web-sites-enable-diagnostic-log/
Best Regards,
Kevin Shen.

Correct Endpoint ACL for Azure Websites

Hi Everyone,
I'm currently in the middle of building out my company's DEV environment using Azure Websites and Azure Virtual Machines. When I enable Endpoint ACLs for SQL (1433) on my SQL VM, my website in Azure Websites is no longer able to access it and I can't find
the correct IP to which I should grant access.
I'm really hoping I can do this using Endpoint ACLs rather than needing to resort to Virtual Networks because this is a DEV environment and I want to spend as little as possible which means sticking with the Azure Websites Basic hosting plan rather than
upgrading to Standard which is overkill.
Also, SQL Azure is currently not a viable option because I need database level encryption which is currently unsupported.
Thanks in advance for any insight you can provide.
Ryan

Azure public IP address are published and refreshed at regular intervals it can be found here: http://www.microsoft.com/en-us/download/details.aspx?id=41653
. This information can be provided in the endpoint ACL list

SSL certificates for multiple websites

I am having problems with websites recognizing the SSL certificate assigned to said site. For example, I have three secure websites; (1) x.abc.com, (2) y.abc.com, and (3) z.abc.com. All are setup for SSL with associated SSL certificates from a signed authority. However, when I browse to said sites, I receive an SSL mismatch error pertaining to the domain name. For whatever reason, two of the sites want to use the main site SSL certificate.
I have verified that the sites are setup correctly with the proper SSL certificate and restarted web services. Any ideas?
Thanks!

You do this by IP Aliasing the machine
Oh, you were referring to IP Aliases. Sorry. I interpreted your comment as meaning Server Aliases within Apache (where multiple hostnames map to the same virtual host configuration).
My bad.
So we're both right - you need multiple IP addresses on your server (either by duplicating the inteface in System Preferences, or through IPAliases.conf) and you need to bind one SSL site to each IP address (although you could also use different port numbers on the same IP address in Apache).
If you're using NAT you still need multiple public IP addresses that forward to each of the IP Aliases (or virtual hosts).

503 Error Solution for Azure Websites- FYI

Yesterday all of my sites went down because I had a spending limit on my account. I removed the limit and all of my sites returned a 503 error. Everything showed normal on the Azure Portal dashboard. I spent the last day trying to figure out the problem
and implemented numerous trouble shooting steps, including creating a new website instance, restoring from a backup, etc.
The solution that finally worked was that I went to the Scale Tab on the site instance, and changed the Web Hosting Plan Mode from Standard to Basic, and then back again. My sites came back up with no 503 error. This was VERY frustrating.
Everything showed that the sites should be working. I could FTP into them, but could not hit them with a browser (503 error). I wanted to post this in case some other poor unsuspecting fool runs into this issue.

Hi,
Thanks for sharing.
There are some difference between azure website Standard mode and Basic mode, not only the features but also pricing, refer to
http://azure.microsoft.com/en-us/pricing/details/websites/ for more details, if you encounter this issue, restart may be another choice.
Best Regards,
Jambor
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Why, when I successfully connect to Server 2012 Essentials R2 via Anywhere Access does the Remote Desktop Connection use the self signed certificate for RDP instead of the SSL certificate I installed when I set up access anywhere?

Scenario:
Windows Server 2012 R2 Essentials
I purchased an SSL Cert from GoDaddy and I managed (after some challenges) to set up Anywhere access to use that new SSL Cert. I to rebooted the server and I am able to login to Anywhere Access vis https (using the SSL certificate) from PC, Mac and iOS.
So far so good.
The problem I am having is that when I click to launch a remote desktop connection to the server RDP connection wants to use the self signed SSL certificate of the server rather than the SSL Certificate I installed into Anywhere Access. As a result, I get
a security warning like this: "The identity of the remote computer cannot be verified. Do you want to connect anyway?"
The name in the certificate appears as ACME-SERVER.ACMEDOMAIN.local instead of the SSL Certificate I installed, which is
remote.acmedomain.com
If I lick to accept, RDP does work fine, it;s just using a self signed certificate. I want it to use the trusted certificate that I purchased and installed.
My guess is that there must be an additional step to tell Anywhere Access that when it generates the RDP session that it should use the cert? OR, is this just how it works?

Because....
the server does not have a 'trusted' certificate assigned to it.
Only the RDP Gateway has the trusted certificate for the external name.
If you want to remove that error, you have to do one of the following:
Make sure your domain uses a public top level domaim, and get a public trusted certificate for your server.
So, something like,
server.domain.publicdomain.com
Or,
Install that certificate on your remote computer so it is trusted.
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+

Using StartTLS with IMAP connection to Exchange is giving me different certificates for machines different to the IMAP server, security exception each time

I'm using Thunderbird with my work email account, which is using Exchange, this is not officially supported but access is allowed via IMAP.
The problem is when I'm using StartTLS or SSL I'm getting multiple different self signed certificates being returned, seeming depending on which specific backend server is handling the request, each time it causes the Confirm Security Exception dialog to be displayed. If I confirm the exception I get the dialog being displayed again until eventually I get a certificate that seems to match the first certificate I confirmed, at which point I can download or send my pending mail.
Thus is seems that there is only one certificate being stored as an exception for each server connection. Is there some way round this?
Thanks.

What is the reason for the exception prompt in the first place?

Certificate for Azure Websites in the VNET

Similar Messages

Maybe you are looking for