How to use in Azure services

• App Service (Web Apps / Functions / Containers)
• Application Gateway v2
• Azure CDN / Front Door (Classic) / Front Door
• API Management
• Virtual Machines
• Other services

App Service (Web Apps / Functions / Containers)

You can import the Key Vault certificate to the App Service by opening the TLS/SSL Settings from Azure Portal and selecting the Import Key Vault Certificate button from the Private Key Certificate (.pfx).

After importing, the App Service will automatically check for certificate updates.

• Import a certificate from Key Vault - Add and manage TLS/SSL certificates - Azure App Service | Microsoft Docs

Application Gateway v2

• TLS termination with Azure Key Vault certificates | Microsoft Docs

Azure CDN / Front Door (Classic) / Front Door

Azure CDN / Front Door will now automatically deploy the latest version of the certificate when the Key Vault certificate is updated. Selecting Latest as the Key Vault certificate version will automatically update it.

• Tutorial: Configure HTTPS on an Azure CDN custom domain | Microsoft Docs
• Tutorial - Configure HTTPS on a custom domain for Azure Front Door | Microsoft Docs
• Configure HTTPS for your custom domain - Azure Front Door | Microsoft Docs

API Management

• Configure custom domain name for Azure API Management instance - Azure API Management | Microsoft Docs

Virtual Machines

• Azure Key Vault VM Extension for Windows - Azure Virtual Machines | Microsoft Docs
• Azure Key Vault VM Extension for Linux - Azure Virtual Machines | Microsoft Docs
• Tutorial: Secure a web server with TLS/SSL certificates - Azure Virtual Machines | Microsoft Docs

Other services

The issued certificate can be downloaded from Key Vault and used elsewhere, either in Azure or outside Azure.

• Export certificates from Azure Key Vault | Microsoft Docs