Azure Websites: how install a SSL certificate

In my website I wanted to install a SSL certificate for my login page.

I got a certificate from DigiCert - luckly as a Microsoft employee, we can them for free - Thank you Paul !

Then:

  1. if you still don't have it, you have to register your Azure Website with a custom domain name, as described in Configure a custom domain name in Azure App Service
  2. you need to configure your Azure Website with Scale=Standard
  3. then, rather than following the official guide Enable HTTPS for a web app in Azure App Service, I have followed the simpler DigiCert guide Windows Azure Website: Create CSR & Install SSL Certificate
  4. finally modify the web.config of your application to force the login page or all the resources in https
It's worth noting that in case you have some warnings because of mixed http and https resources, you can use the very useful tool Why No Padlock? to find hardcoded protocols in your page. For example, for external resources to your site, you want to be protocol agnostic prepending the external resources with "//".

Add comment

Loading