Azure for Architects - Second Edition

Step 3

To create a service principal using certificates, the following steps should be executed:

1. Create a self-signed certificate or purchase a certificate: A self-signed certificate is used to create this example end-to-end application. For real-life deployments, a valid certificate should be purchased from a certificate authority.

To create a self-signed certificate, the following command can be executed. The self-signed certificate is exportable and stored in a personal folder on the local machine. It also has an expiry date:

$currentDate = Get-Date$expiryDate = $currentDate.AddYears(1)$finalDate = $expiryDate.AddYears(1)$servicePrincipalName = "https://automation.book.com"$automationCertificate = New-SelfSignedCertificate -DnsName $servicePrincipalName ...