Free Microsoft-managed SSL/TLS certificates for Power Pages
Diesen Beitrag auf Deutsch lesen
Power Pages can provision, configure and renew a free Microsoft-managed certificate for custom domains, while admins retain DNS and outage planning responsibilities.
TL;DR
Power Pages can now provision, configure and renew a Microsoft-managed SSL/TLS certificate for a custom domain at no extra cost. Admins must disable CDN and Web Application Firewall, remove the existing binding, certificate and hostname in that order, then reconnect the domain and retain DNS CNAME management.
Original by Nick Doelman, on The ReadyXRM Blog. Read the original
This is our own summary, not a republication or full translation.
Governance takeaway
- Admins/CoE: Disable CDN and Web Application Firewall, then remove the binding, certificate and hostname in order before selecting the managed certificate.
- Admins/CoE: Schedule the change during a quiet window because the custom domain can be unreachable for several minutes.
- Security/Compliance: Keep using uploaded certificates where policy requires internal certificate management, because the managed option supplements rather than replaces that capability.
Frequently asked questions
What do I need to switch off before using the Microsoft managed certificate for Power Pages?
CDN and the web application firewall must be turned off first. When they are enabled, the Microsoft managed certificate option is not greyed out, it does not appear at all.
Will my Power Pages site stay reachable while I switch to the managed certificate?
No. During the switch the site is unreachable on its custom URL until the new binding is complete, and Microsoft warns that finishing takes several minutes.
Is the Microsoft managed certificate for Power Pages free, and can I still use my own?
It costs nothing extra, and Microsoft provisions, configures and renews it automatically. You can still upload your own certificate or use an existing one.