Managing Certificates in Azure

Generate a New Certificate

  1. Generate CSR in KeyVault
    1. Content-Type should be PKCS #12 for new certificates.
    2. Note that the content type should remain the same as previous certificate during renewal.
  2. Submit CSR to WUIT
  3. Download the certificate PEM .cer file
  4. Complete the certificate request in KeyVault
  5. Download the completed certificate from the KeyVault

Extract the Private Key

  1. Download the PEM file from the KeyVault
  2. Copy the private key section from the PEM file and place it in a new .key file.

See Also

Certificate Content Type
GIC Certificate Renewal


Updated on August 12, 2025