Client Certificates and mTLS in API Management

This series covers how to work with client certificates in Azure API Management to set up mutual TLS (mTLS) connections. We explore both validating client certificates in API Management and connecting to backends using mTLS.


A thumbnail image

Validate client certificates in API Management

This blog post is the start of a series on how to work with client certificates in Azure API Management to setup a mutual TLS (mTLS) connection. While Azure’s official documentation provides excellent guidance on setting up client certificates via the Azure Portal, we’ll dive into utilizing Bicep and the Azure CLI, to automate the process. In this first post, we’ll cover the basics of how to validate client certificates in API Management.

Feb 2, 2024 - 13 min read
A thumbnail image

Validate client certificates in API Management when it's behind an Application Gateway

In this second post, we expand on the solution from the previous post. We’ll deploy API Management inside a virtual network, positioning it behind an application gateway. We’ll configure the application gateway with an mTLS listener to validate client certificates and forward them to API Management for further processing. This approach can also be used with other types of backends, such as an ASP.NET Web API.

Feb 19, 2024 - 24 min read
A thumbnail image

Securing backend connections with mTLS in API Management

In this third post on working with client certificates in Azure API Management, we’ll focus on securing backend connections with mTLS. We’ll deploy two API Management instances. The first will serve as the backend and require a client certificate for authentication. The second will act as the client. We will call the client using TLS, and it will, in turn, connect to the backend using mTLS.

May 24, 2024 - 12 min read