README.md

This contains the Security related TSG's surfaced in the Azure Portal during support ticket creation:

Category

Certificate Expired

• Fix Expired Cluster Certificate Automated Script
• Fix Expired Cluster Certificate Manual Steps
• FixExpiredCert.ps1
• Create a New Self Signed Certificate

Couldn't add or renew certificate

• Add-AzureRmServiceFabricClusterCertificate throws error TwoCertificatesToTwoCertificatesNotAllowed
• Add_New_Cert_To_VMSS.ps1
• How to use https://resources.azure.com to add and swap the Secondary Certificate

Private Key Permissions

• Failed to get the Certificates private key
• How to ACL application certificate private key using ApplicationManifest.xml
• How to set ACL for a SF certificate

Certificate Configuration

• Install intermediate certificates
• Intermediate Certificate causes VMExtensionProvisioningError
• Swap Reverse Proxy certificate
• View Cluster Certificate
• Create a New Self Signed Certificate
• How to swap certificates using ARM template deployment
• Service Fabric unable to authenticate with primary certificate

AAD configuration

• Configure Azure Active Directory Authentication for Existing Cluster
• Authentication Issue with AAD

Other Configuration

• Change the RDP password for your nodetype (VMSS)
• Desired State Configuration example - ACL a certificate using DSC
• How to clean up Fabric firewall rules
• Minimum NSG requirements for Service Fabric
• Recommended AV (Antivirus) software exclusions for Service Fabric clusters
• TLS Configuration

How-to

• Determine Cert bound to a specific port
• Steps to download the pfx file from key vault
• Securing Application Endpoint (ie. DoS DDoS prevention)
• How to mitigate SecurityApi_CertGetCertificateChain health warning (CTL accessibility issue or CRL slow/offline)