-
Notifications
You must be signed in to change notification settings - Fork 18
Description
Describe the scenario you would like to see
This demo showcases how to automatically request or renew TLS certificates from Let’s Encrypt and store them securely in Azure Key Vault using a client application running in an Azure Function. As part of the process, the client app creates the required DNS verification record in Azure DNS. Once Let’s Encrypt verifies the record, the certificate is issued. After issuance, the client app removes the verification record from Azure DNS. The certificate is then stored in Azure Key Vault.
This setup is a practical example that can be used alongside courses such as SC-300, AZ-500, or any training that covers Azure Key Vault. It also provides a great opportunity to demonstrate the use of managed identities, as the Function App requires permissions to store certificates in Azure Key Vault and to manage DNS records in Azure DNS.
I have created a step by step guide at the below post.
https://cloudbuild.co.uk/free-automated-lets-encrypt-certificates-in-azure-key-vault-with-acme-bot-a-step-by-step-guide/
Relevant screenshots
Step by step instructions and screenshots available at the link below.