Skip to content

Commit 3f6cda8

Browse files
Merge branch 'main' of github.com-personal:MicrosoftDocs/azure-docs-pr into learn/sre-agent-pr6030-tools-roles
2 parents 4a9d69c + 3746c10 commit 3f6cda8

444 files changed

Lines changed: 4359 additions & 3068 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.openpublishing.redirection.json

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -516,6 +516,11 @@
516516
"redirect_url": "/azure/azure-functions/durable/durable-task-scheduler/durable-task-scheduler-billing",
517517
"redirect_document_id": false
518518
},
519+
{
520+
"source_path": "articles/azure-functions/durable/durable-task-scheduler/quickstart-work-item-filtering-durable-task.md",
521+
"redirect_url": "/azure/durable-task/scheduler/quickstart-work-item-filtering-durable-task",
522+
"redirect_document_id": false
523+
},
519524
{
520525
"source_path": "articles/azure-functions/durable/durable-functions-cloud-backup.md",
521526
"redirect_url": "/azure/azure-functions/durable/durable-functions-fan-in-fan-out",
@@ -531,6 +536,11 @@
531536
"redirect_url": "/azure/azure-functions/durable/durable-functions-human-interaction",
532537
"redirect_document_id": false
533538
},
539+
{
540+
"source_path": "articles/azure-functions/durable/tutorial-durable-text-analysis-azure-files.md",
541+
"redirect_url": "/azure/azure-functions/durable-functions/tutorial-durable-text-analysis-azure-files",
542+
"redirect_document_id": false
543+
},
534544
{
535545
"source_path": "articles/expressroute/expressroute-troubleshooting-arp-resource-manager.md",
536546
"redirect_url": "/troubleshoot/azure/expressroute/expressroute-troubleshooting-arp-resource-manager",
@@ -7572,6 +7582,6 @@
75727582
"source_path": "articles/certification/edge-secured-core-get-certified.md",
75737583
"redirect_url": "/azure/certification/requirements-edge-secured-core",
75747584
"redirect_document_id": false
7575-
},
7585+
}
75767586
]
75777587
}

articles/api-management/TOC.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -745,7 +745,7 @@
745745
href: breaking-changes/git-configuration-retirement-march-2025.md
746746
- name: Direct management API retirement (March 2025)
747747
href: breaking-changes/direct-management-api-retirement-march-2025.md
748-
- name: Managed certificates suspension (August 2025 - March 2026)
748+
- name: Managed certificates suspension (August 2025 - June 2026)
749749
href: breaking-changes/managed-certificates-suspension-august-2025.md
750750
- name: ADAL-based identity provider retirement (September 2025)
751751
href: breaking-changes/identity-provider-adal-retirement-sep-2025.md

articles/api-management/api-management-capacity.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -170,7 +170,8 @@ Use capacity metrics for making decisions whether to scale an API Management ins
170170
+ Ignore sudden spikes that are most likely not related to an increase in load (see [Capacity metric behavior](#capacity-metric-behavior) section for explanation).
171171
+ As a general rule, upgrade or scale your instance when a capacity metric value exceeds **60% - 70%** for a long period of time (for example, 30 minutes). Different values may work better for your service or scenario.
172172
+ If your instance or workspace gateway is configured with only 1 unit, upgrade or scale it when a capacity metric value exceeds **40%** for a long period. This recommendation is based on the need to reserve capacity for guest OS updates in the underlying service platform.
173-
+ Use [available diagnostics](monitor-api-management.md) to monitor the response times of API calls. Consider adjusting scaling thresholds if you notice degraded response times with increasing value of capacity metric.
173+
+ Use [available diagnostics](monitor-api-management.md) to monitor the response times of API calls. Consider adjusting scaling thresholds if you notice degraded response times with increasing value of capacity metric.
174+
+ For classic tiers, discard the most recent 1‑minute data point when reading raw Azure API Management capacity metrics because the derived value can be invalid if source data isn’t available at aggregation time; do not base operational or scaling decisions on 1‑minute values — for autoscaling use average aggregation windows of 30 minutes or longer, evaluate sustained conditions before scaling, and annotate dashboards to exclude the final 1‑minute point so trends reflect reliable data.
174175

175176
> [!TIP]
176177
> If you are able to estimate your traffic beforehand, test your API Management instance or workspace gateway on workloads you expect. You can increase the request load gradually and monitor the value of the capacity metric that corresponds to your peak load. Follow the steps from the previous section to use Azure portal to understand how much capacity is used at any given time.

articles/api-management/breaking-changes/managed-certificates-suspension-august-2025.md

Lines changed: 9 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,28 +1,31 @@
11
---
22
title: Azure API Management - Managed certificates suspension for custom domains (August 2025)
3-
description: Azure API Management is temporarily suspending creation of managed certificates for custom domains from August 15, 2025 to March 15, 2026 due to industry-wide changes in domain validation.
3+
description: Azure API Management is temporarily suspending creation of managed certificates for custom domains from August 15, 2025 to June 30, 2026 due to industry-wide changes in domain validation.
44
services: api-management
55
author: dlepow
66
ms.service: azure-api-management
77
ms.topic: reference
88
ai-usage: ai-assisted
9-
ms.date: 02/06/2026
9+
ms.date: 04/03/2026
1010
ms.author: danlep
1111
---
1212

13-
# Creation of managed certificates temporarily suspended for custom domains (August 2025 - March 2026)
13+
# Creation of managed certificates temporarily suspended for custom domains (August 2025 - June 2026)
1414

1515
[!INCLUDE [premium-dev-standard-basic.md](../../../includes/api-management-availability-premium-dev-standard-basic.md)]
1616

17-
Creation of Azure-managed certificates for custom domains in API Management will be temporarily turned off from August 15, 2025 to March 15, 2026. Existing managed certificates will be autorenewed as long as your API Management service allows inbound traffic from DigiCert IP addresses on port 80 and DNS is properly configured.
17+
> [!IMPORTANT]
18+
> The suspension period for managed certificates was recently extended to June 30, 2026.
19+
20+
Creation of Azure-managed certificates for custom domains in API Management will be temporarily turned off from August 15, 2025 to June 30, 2026. Existing managed certificates will be autorenewed as long as your API Management service allows inbound traffic from DigiCert IP addresses on port 80 and DNS is properly configured.
1821

1922
In the classic service tiers, Azure API Management offers [free, managed TLS certificates for custom domains](../configure-custom-domain.md#domain-certificate-options) (preview), allowing customers to secure their endpoints without purchasing and managing their own certificates. Because of an industry-wide deprecation of CNAME-based Domain Control Validation (DCV), our Certificate Authority (CA), DigiCert, is moving to a new open-source software (OSS) domain control validation (DCV) platform that provides transparency and accountability increasing the trustworthiness of domain validation. As part of this transition, DigiCert will deprecate support for the legacy CNAME Delegation DCV workflow. This migration requires us to temporarily suspend the creation of managed certificates for custom domains.
2023

2124
Note that this does not impact the standard CNAME DCV workflow (where DigiCert validates a random value in the CNAME record) which is still supported in the OSS validation system. This change affects several Azure services that currently rely on the soon-to-be deprecated CNAME for automated certificate issuance and renewal.
2225

2326
## Is my service affected by this?
2427

25-
You're affected if you plan to create new managed certificates for custom domains in Azure API Management between August 15, 2025 and March 15, 2026.
28+
You're affected if you plan to create new managed certificates for custom domains in Azure API Management between August 15, 2025 and June 30, 2026.
2629

2730
As part of this change, starting January 2026, for Azure API Management to be able to renew (rotate) your existing managed certificate, inbound access is required on port 80 to allow [specific DigiCert IP addresses](https://knowledge.digicert.com/alerts/ip-address-domain-validation?utm_medium=organic&utm_source=docs-digicert&referrer=https://docs.digicert.com/en/certcentral/manage-certificates/domain-control-validation-methods/automatic-domain-control-validation-check.html).
2831

@@ -32,7 +35,7 @@ The suspension of managed certificates for custom domains will be enforced from
3235

3336
## What do I need to do?
3437

35-
If you need to add new managed certificates, plan to do so before August 15, 2025 or after March 15, 2026. During the suspension period, you can still configure custom domains with certificates you manage from other sources.
38+
If you need to add new managed certificates, plan to do so before August 15, 2025 or after June 30, 2026. During the suspension period, you can still configure custom domains with certificates you manage from other sources.
3639

3740
If you already have managed certificates for your custom domains, do the following to ensure continued access:
3841

articles/api-management/configure-custom-domain.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ author: dlepow
77

88
ms.service: azure-api-management
99
ms.topic: how-to
10-
ms.date: 07/25/2025
10+
ms.date: 04/03/2026
1111
ms.author: danlep
1212
ms.custom:
1313
- engagement-fy23
@@ -106,7 +106,7 @@ For more information, see [Use managed identities in Azure API Management](api-m
106106
API Management offers a free, managed TLS certificate for your domain, if you don't wish to purchase and manage your own certificate. The certificate is autorenewed automatically.
107107

108108
> [!IMPORTANT]
109-
> **Creation of managed certificates for custom domains in API Management will be temporarily unavailable from August 15, 2025 to March 15, 2026.** Our Certificate Authority (CA), DigiCert, will migrate to a new validation platform to meet Multi-Perspective Issuance Corroboration (MPIC) requirements for issuing certificates. This migration requires us to temporarily suspend the creation of managed certificates for custom domains. [Learn more](breaking-changes/managed-certificates-suspension-august-2025.md)
109+
> **Creation of managed certificates for custom domains in API Management will be temporarily unavailable from August 15, 2025 to June 30, 2026.** Our Certificate Authority (CA), DigiCert, will migrate to a new validation platform to meet Multi-Perspective Issuance Corroboration (MPIC) requirements for issuing certificates. This migration requires us to temporarily suspend the creation of managed certificates for custom domains. [Learn more](breaking-changes/managed-certificates-suspension-august-2025.md)
110110
>
111111
> Existing managed certificates will be autorenewed and remain unaffected.
112112
>

0 commit comments

Comments
 (0)