How to change/configure End-to-end TLS encryption of an existing Web App using PowerShell

Aranca, Farimah 0

I have multiple Web Apps under Azure App Service that currently have End-to-end TLS encryption turned off. Is there a way to change this configuration (from off to on) through PowerShell?

SnehaAgrawal-MSFT 21,346 Reputation points

2024-09-10T06:23:22.2866667+00:00
@Aranca, Farimah Thanks for reaching here!

If I am understanding right you want to configure end-to-end TLS encryption for your web apps in Azure App Service by using with PowerShell.

Sure, you can configure end-to-end TLS encryption for your web apps in Azure App Service by using Azure Application Gateway with PowerShell.

Here are the high-level steps to configure end-to-end TLS encryption for your web apps:

Create a resource group.

Create a virtual network with two subnets.

Create an application gateway with end-to-end TLS encryption.

Configure the application gateway to route traffic to your web apps.

You can find detailed instructions on how to configure end-to-end TLS encryption for your web apps in Azure App Service by using Azure Application Gateway with PowerShell in the following article:

Configure end-to-end TLS with Azure Application Gateway

The article provides a step-by-step guide to create an application gateway with end-to-end TLS encryption and route traffic to your web apps. It also includes PowerShell scripts that you can use to automate the process.

Please let us know if further query or issue remains.
Aranca, Farimah 0 Reputation points

2024-09-10T06:52:45.1766667+00:00

Hi @SnehaAgrawal-MSFT thanks for the response. What if I don't want to use App GW and I just want to change the configuration directly? Can this be done through PowerShell?
SnehaAgrawal-MSFT 21,346 Reputation points

2024-09-10T07:44:44.6666667+00:00
@Aranca, Farimah Thanks for reply! sure- you can use End-to-end (E2E) TLS Encryption feature for Linux and Windows multi-tenant web apps! It is available to Standard App Service Plans and above.

By default, all App Service resources will have their TLS encryption terminated in the front-end. If you would like to enable E2E encryption feature, you just need to update your site property without any additional changes to your application code.

To enable E2E encryption you can configure E2E encryption via ARM or API or Azure portal.

To configure the E2E encryption for your resource on App Service, you will need to update the site property “endToEndEncryptionEnabled”.

Refer to the sample API call below.

PUT https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Web/sites/{name}?api-version=2022-03-01 { "location": "<region>", "properties": { "endToEndEncryptionEnabled": true } }

Refer to these below document link would be helpful-

The All-Inclusive Update for Everything TLS on App Service

1 answer

SnehaAgrawal-MSFT 21,346 Reputation points

2024-09-11T06:28:30.6033333+00:00

@Aranca, Farimah To add further although doc refers to Azure Portal or REST API.

You can try to invoke the API using Powershell command Invoke-RestMethod.

References:

Invoke-RestMethod (Microsoft.PowerShell.Utility) - PowerShell | Microsoft Learn

Web Apps - Create Or Update - REST API (Azure App Service) | Microsoft Learn

Couldn’t find any with existing powershell appservice module: Set-AzWebApp (Az.Websites) | Microsoft Learn

Let me know, if this helps.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to change/configure End-to-end TLS encryption of an existing Web App using PowerShell

1 answer

Your answer