Free Assessment

Azure_AppService_4

Ensure the web app has ' Client Certificates (Incoming client certificates) ' set to ' On '

Description

Client certificates allow for the app to request a certificate for incoming requests. Only clients that have a valid certificate will be able to reach the app.

Remediation

Perform the following in the Azure Console:

  1. Login to Azure Portal using https://portal.azure.com
  2. Go to App Services
  3. Click on each App
  4. Under Setting section, Click on SSL settings
  5. Set Incoming client certificates to On under Protocol Settings section

Perform the following in Azure Command Line Interface 2.0:

To set Incoming client certificates value for an existing app, run the following command.

az webapp update –resource-group <RESOURCE_GROUP_NAME> –name <APP_NAME> –set clientCertEnabled=true

Service

AppService

Severity

Medium

Compliance

Mapping

Start Free Trial
Login

CLOSE

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!

Learn More