Update Azure Application Gateway

FunMum 140 Reputation points
2026-06-26T17:07:05.9766667+00:00

Hello,

We want to update the TLS certificates of applications that sit behind the Azure application gateway. What is the best practice in order to do this? Should we update the listener or create a new listener?

Azure Application Gateway
Azure Application Gateway

An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andrew Taylor - COREZENN 1,225 Reputation points Volunteer Moderator
    2026-06-27T01:36:18.65+00:00

    Hi @FunMum

    Thank you for reaching out to Microsoft Q&A, I understand you are looking for guidance on TLS Certificates.

    Best practice is to update/renew the certificate on the existing HTTPS listener (or the existing SSL certificate object), rather than creating a new listener only for renewal.

    Microsoft confirms that renewing a valid certificate on Application Gateway does not cause downtime, and the documented portal flow is to select the existing listener and use Renew or edit selected certificate: https://learn.microsoft.com/azure/application-gateway/renew-certificates

    For long-term operations, the recommended approach is to store listener certificates in Azure Key Vault and reference them with a versionless secret ID, so Application Gateway can automatically rotate to new certificate versions: https://learn.microsoft.com/azure/application-gateway/key-vault-certs

    Also note: if one certificate object is attached to multiple listeners, updating that certificate affects all associated listeners: https://learn.microsoft.com/azure/application-gateway/ssl-certificate-management

    Please 'Upvote' (Thumbs-up) and 'Accept' as answer if the response was helpful. This will be help other community members who face the same issue.

    Best regards,

    Andrew S Taylor

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.