简体繁体 English

自签名证书，用于天蓝色广告注册的应用程序

[英]self signed certificate for azure ad registered applications

原文 2018-12-13 12:02:54 2 2 azure/ azure-active-directory

Hi I have a daemon application which will access Azure AD graph API. 嗨，我有一个守护程序应用程序，它将访问Azure AD图形API。 I am trying to have certificate based authentication,Hence first creatinga self signed certificate. 我正在尝试基于证书的身份验证，因此首先创建一个自签名证书。 I have followed this article https://azure.microsoft.com/en-in/resources/samples/active-directory-dotnet-daemon-certificate-credential/ 我关注了这篇文章https://azure.microsoft.com/en-in/resources/samples/active-directory-dotnet-daemon-certificate-credential/

I am using windows 10 machine. 我正在使用Windows 10机器。

When I try to modify the manifest file of registered application of Azure AD I get below error 当我尝试修改Azure AD注册应用程序的清单文件时，出现以下错误

Failed to update application graphapi2. 无法更新应用程序graphapi2。 Error details: KeyValue cannot be null or empty Request ID: fea0789a-b8fd-4001-83c4-f74d67fb9812, Timestamp: 12/13/2018 11:56:08 错误详细信息：KeyValue不能为空或为空请求ID：fea0789a-b8fd-4001-83c4-f74d67fb9812，时间戳：12/13/2018 11:56:08

Has any one faced this issue?How will I be able to create self signed certificate to azure ad registered applications. 有人遇到过这个问题吗？我将如何创建自签名证书以使广告注册的应用程序蔚蓝。

2 个解决方案

I got it working by following this link :-github.com/Azure-Samples/active-directory-dotnetcore-daemon-v2 . 我通过以下链接使它起作用：-github.com/Azure-Samples/active-directory-dotnetcore-daemon-v2。 While exporting the key choose the option ->Do not export private key->Base 64 encoded option.Later I uploaded the certificated in the app registrations preview and it works!! 导出密钥时，请选择选项->不导出私钥-> Base 64编码选项。后来我在应用程序注册预览中上传了证书，它可以正常工作！ :) :)

This seems to be happening in the Azure Portal when using the "App registrations (preview)" rather than the normal "App registrations". 使用“应用程序注册（预览）”而不是常规的“应用程序注册”时，这似乎在Azure门户中发生。 If you try "App registrations" and edit the manifest there and add your KeyCredentials it seems to work fine. 如果您尝试“应用程序注册”并在此处编辑清单并添加您的KeyCredentials，则看起来工作正常。