Renewal guides
Recognize credential expiry failures and plan a tested renewal for Microsoft Entra applications and certificates.
Renewal guides
- Application Proxy SSL certificates
Find Entra App Proxy SSL certificates that expire soon and replace the PFX on every existing app with the portal or Microsoft's PowerShell script.
- Azure DevOps service connection
Why Azure DevOps pipelines fail with AADSTS7000222 when the service connection client secret expires, how to renew it, and how to stop it happening again.
- Client authentication certificates
Entra app certificate expired or failing with AADSTS700027? Find certificates that expire soon and renew with Azure CLI --append or Graph addKey.
- Client secrets
Entra client secret expired with AADSTS7000222? Renew it with Azure CLI, PowerShell or Graph without an outage and find secrets that expire soon.
- Microsoft Entra Connect Sync certificate
Entra Connect Sync warns with Event ID 1011 at 70% of the certificate's lifetime. What the warning means, how to check the scheduler, how to rotate.
- Owner has left
Find Entra apps whose listed owner left or is disabled, assign a successor, then renew the expiring secret or certificate before workloads fail.
- Ownerless credentials
Find Entra apps with no owner, see which administrators can renew their secrets or certificates, and follow the renewal path before credentials expire.
- SAML signing certificates
Find Entra SAML signing certificates that expire soon, check expiry emails, and renew with Graph or the portal after the application accepts the new key.