Failed to remove the Basic SKU public IP address reference from a Basic SKU VPN gateway

Question

Failed to remove the Basic SKU public IP address reference from a Basic SKU VPN gateway

Jordan 20

I am trying to remove the Basic SKU public IP address reference from a Basic SKU VPN gateway in the Azure portal as per the documentation here: https://learn.microsoft.com/en-us/azure/vpn-gateway/basic-sku-public-ip-remove due to the email received stating this must be done before 30 June 2026.

I have validated that this is a Basic SKU public IP address resource reference in an existing Basic SKU VPN gateway and all validations are succeeded:

User's image

I am however encountering the following error when selecting Delete Basic Public Ip Reference:

Error code: InvalidTemplateDeployment
Message: The template deployment 'VirtualNetworkGatewayUpdate-20260420102907' is not valid according to the validation procedure. The tracking id is '{REDACTED}'. See inner errors for details.

My understanding this is an automated template as part of the deletion process. The inner errors don't really display too much more information.

Jordan 20 Reputation points

2026-04-20T21:02:10.0933333+00:00

Hi,

Where's a reference for the April-May timeline? All I have been able to find is March 2026 as an anticipated timeline here: https://learn.microsoft.com/en-us/azure/vpn-gateway/whats-new. I don't find it very helpful that we have had clients receive these emails stating that this needs to be completed by June 31 2026 - with references to documents and features that need to be used that appear/according to these forums to not function.

Thankfully there are still 2 months to have this completed by.
Venkatesan S 7,635 Reputation points Microsoft External Staff Moderator

2026-04-21T04:25:20.07+00:00

Hi Jordan,

Could you please share the requested details over private message?

Answer accepted by question author

0 additional answers

Your answer

Jordan 20 Reputation points

2026-04-20T21:02:10.0933333+00:00

Hi,

Where's a reference for the April-May timeline? All I have been able to find is March 2026 as an anticipated timeline here: https://learn.microsoft.com/en-us/azure/vpn-gateway/whats-new. I don't find it very helpful that we have had clients receive these emails stating that this needs to be completed by June 31 2026 - with references to documents and features that need to be used that appear/according to these forums to not function.

Thankfully there are still 2 months to have this completed by.
Venkatesan S 7,635 Reputation points Microsoft External Staff Moderator

2026-04-21T04:25:20.07+00:00

Hi Jordan,

Could you please share the requested details over private message?

Answer 1

Hi Jordan,

Thanks for the reaching out in Microsoft Q&A forum,

My understanding this is an automated template as part of the deletion process. The inner errors don't really display too much more information.

Update:

Connected with customer offline:

The deployment validation is failing because the VPN gateway has an expired client root certificate, not because of the Basic public IP removal itself.

In the Azure portal, open your Virtual network gateway → Point-to-site configuration. In the Root certificate section, find DesignroomCert, open the menu next to it, and choose Remove.

Wait for gateway update > retry the public IP reference removal.

Kindly let us know if the above helps or you need further assistance on this issue.

Reference:

Please do not forget to and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Share via

Failed to remove the Basic SKU public IP address reference from a Basic SKU VPN gateway

0 additional answers

Your answer