README.md

Important Changes to App Service Managed Certificates: Is Your Certificate Affected? - Overview

Costa Rica

brown9804

Last updated: 2025-09-05

---

Important

Please review this article first: Important Changes to App Service Managed Certificates: Is Your Certificate Affected?

List of References (Click to expand)

• App Service Managed Certificate (ASMC) changes – July 28, 2025
• Important Changes to App Service Managed Certificates: Is Your Certificate Affected?

Note

For the scenarios outlined in the article, please find an alternative set of queries to help you determine whether your environment might be impacted. These queries include visual guidance for reference. If you have any questions or need further clarification, please reach out to your Microsoft account team or contact Microsoft directly: Microsoft Sales and Support for additional support and guidance, or

Your site is not publicly accessible

Please find below some examples of how it looks:

Public Network (Click to expand)

Private Network (Click to expand)

You’re affected if public accessibility is blocked in any of these ways:

• Public network access = Disabled
• Private endpoints only (VNet-only access)
• IP restrictions that don’t allow the CA’s HTTP challenge
• Client-certificate enforcement on incoming requests

This query, finds any App Service that meets any of those four conditions

How.to.query.if.public.accessibility.is.blocked.mp4

Your site uses Azure Traffic Manager "nested" or "external" endpoints

You’re affected if your App Service uses Azure Traffic Manager with any of these endpoint types:

• Nested endpoints
• External endpoints

Tip

Only Azure Endpoints in Traffic Manager are supported for App Service Managed Certificate creation and renewal.
Action:

• Transition to using Azure Endpoints for your Traffic Manager profile
• If you cannot switch, you must obtain and bind your own SSL certificate for the custom domain

Refresh Date: 2025-07-18