# Generate an Azure Certificate for Existing Azure Apps in SharePoint Online

You can add the Azure certificate to an existing Azure app from the Configuration tab of the SharePoint Online app.

Important

- You can only add an Azure certificate to an existing Azure app from the Configuration tab if the Azure app has the Microsoft Graph Application.ReadWrite.All permission.
- Existing clients who have Azure apps with App Principal configured will continue to have regular backups and restores unless Microsoft retires Azure ACS. To ensure that backups and restores can continue to work after Azure ACS is retired, it is recommended to configure Azure Certificates for existing Azure Apps.
- Azure Certificates require the SharePoint application permission Sites.FullControl.All and this needs to be added to Azure Apps as well.
- Under the Configuration tab, in the SharePoint connection settings section, click the Verify connection button to check if the required Azure certificate or the SharePoint permissions are present. Backups and restores will continue to work even if they are missing.

## Adding the Azure Certificate to an Existing Azure App

1. From the Command Center navigation pane, go to Protect > Microsoft 365.

   The Microsoft 365 Overview page appears.

2. On the Apps tab, click the app.

   The Overview page of the app appears.

3. On the Configuration tab, under SharePoint connection settings, click the action button , and then click Generate certificate.

   The Generate certificate tool appears.

4. Click Proceed.

   The Azure certificate will be generated and uploaded.

5. Click Close.

×

Loading...