You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
On Azure Arc-enabled SQL Server, Azure automatically rotates certificates for Active Directory. This article explains how the automatic process works and identifies the process specifics for Windows and Linux operating systems.
16
+
On Azure Arc-enabled SQL Server, Azure automatically rotates certificates for Azure Active Directory. This article explains how the automatic process works and identifies the process specifics for Windows and Linux operating systems.
17
17
18
-
Certificate management depends on whether you manage your own certificates - *customer managed certificates*, or the service manages the certificates - *service managed certificates*.
18
+
Certificate management depends on whether you manage your own certificates (*customer managed certificates*), or the service manages the certificates (*service managed certificates*).
19
19
20
20
## Prerequisite
21
21
@@ -25,7 +25,7 @@ The functionality described in this article applies to an instance of Azure Arc-
25
25
26
26
## Customer managed certificate rotation
27
27
28
-
For Customer Managed Certificate rotation, you create a new version of the certificate in Azure Key Vault. If you don't create the new version yourself, Azure Key Vault automatically rotates the certificate after the certificate lifetime has been met. In Azure Key Vault, you can pick, configure, and choose any percentage for the certificate lifetime period.
28
+
For customer managed certificate rotation, you create a new version of the certificate in Azure Key Vault. If you don't create the new version yourself, Azure Key Vault automatically rotates the certificate after the certificate lifetime has been met. In Azure Key Vault, you can pick, configure, and choose any percentage for the certificate lifetime period.
29
29
30
30
After you create the new version, you can download the new certificate in `.cer` format and upload it to the app registration in place of the old certificate.
31
31
@@ -34,10 +34,10 @@ After you create the new version, you can download the new certificate in `.cer`
34
34
35
35
## Service managed certificate rotation
36
36
37
-
For service managed certificate rotation, Azure Key Vault automatically rotates the certificate for you. By default, the certificate are rotated after the certificate lifetime has been met. You can pick configure and choose any percentage for the certificate lifetime period. If the certificate has expired, then the automatic rotation fails.
37
+
For service managed certificate rotation, Azure Key Vault automatically rotates the certificate for you. By default, the certificate are rotated after the certificate lifetime has been met. If the certificate has expired, then the automatic rotation fails.
38
38
39
39
> [!NOTE]
40
-
> For Linux, the old certificate will not get deleted and the server will need to be manually restarted.
40
+
> For Linux, the old certificate will not be deleted from the app registration used for Azure Active Directory authentication and the SQL server running on the Linux machine will need to be manually restarted.
0 commit comments