Azure App Service creates certificate under defunct Resource Group

Charley Jones, PMP/MCDBA/MCAD/MCSE 1 Reputation point
2022-01-01T23:09:36.43+00:00

When I use App Service | TSL/SSL Settings | Private Key Certificates (.pfx) | Create App Service Managed Certificates, the certificate is created under a defunct Resource Group "DesignClub." I deleted that group. Not sure why it's creating the certificate there. I have two resource groups, Production and Development. DesignClub gets recreated when I create a certificate. I've verified that the App Service Plan, App Service, and Storage Account are all in the Production Resource Group.

So far, I have two working certificates, both App Service Managed, that I really would like to move into the Production Resource Group. What would be my best course of action?

Azure Resource Mover won't move certificates.
I receive the following error message: "Resource move is not supported for resource types 'Microsoft.Web/certificates"

To be clear, this is an Azure created App Service Managed Certificate, not an imported certificate.

Azure Resource Mover
Azure Resource Mover
An Azure service used for moving multiple resources between Azure regions.
232 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,756 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. SnehaAgrawal-MSFT 21,506 Reputation points
    2022-01-04T08:00:50.057+00:00

    Thanks for asking question. This is seems strange. App Service Managed certificates is created on your already created App Service which is under your selected resource group. You need to select the custom domain to create a free certificate for and select Create. You can create only one certificate for each supported custom domain. When the operation completes, you see the certificate in the Private Key Certificates list.

    Could you confirm if resource group was deleted successfully? Also, if you have bind your certificate to a custom domain of DesignClub resource group?

    As, Its mentioned in the document that "You can't move a free App Service managed certificate. "

    Let us know.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.