Windows Admin Center changes certificate after install

[gmcmenimen]

I have installed Windows Admin Center on a new Windows Server 2022 in Azure (with AAD) and using my own signed certificate.  I get it up and running and at some point, after the install, the certificate is changed without my intervention.  It begins to use a certificate from arc.waconazure.com which fails due to it missing the Subject Alternate Name.  Either way I have been running into this constantly and i eventually have to run a PowerShell script that changes the certificate thumbnail back.  It happens frequently.  What can I do to ensure that the certificate thumbnail never changes?

[#2]

Hi there, this isn't usually the case on upgrade to 2311. At least not with AD CS issued certs.

There's WAC integrated in Azure how about using this as an alternative?

Check Azure Arc pane.

[#3]

I've seen the same issue. I have tried running WAC from different Windows Servers (2016 and 2022) in the same domain and it keeps happening. I have tried versions 2211, 2306, and now 2311.

[#4]

if you can repro it, your best shot is using Azure Support to report it. Thank you for your time in advance.

[#5]

Thank you. I will try that. I opened a support ticket from the M365 Admin portal and they were of no use and closed my ticket. I had to explain to the tech what Windows Admin Center was

[#6]

While waiting for support, I tried again. The certificate that keeps overwriting my certificate is one for a resource on waconaure.com.

[#7]

Hi guys,
any solution to this one?
Im facing the same error for a couple of days now.
I'v freshly installed WAC 2311 and used a CA-certificate during install.
After a couple on minutes, while configuring WAC, the cert was changed to a azure certificate issued by "Microsoft Azure RSA TLS Issuing CA 07".
Happened a couple of times now - very annoying...

[#8]

@Kai-Uwe_Dzialas unfortunately no resolution. I’ve gotten the runaround from Microsoft Support so far.  My latest attempt is with Azure Support.  Ive had two working sessions with them demonstrating the problem and for 3 weeks all I’ve been told is they are looking at it.  I can repeat the issue every time after either running a repair on existing installation or by removing and reinstalling. 

[#9]

I am sorry to hear what happened David. M365 in fact has no straws to pull in Windows Admin Center. It is a product supported by Azure Support.

[#10]

I finally have a solution to my issue. I have WAC running on an Azure VM. The Windows Admin Center extension was installed but disabled on my Azure VM. I worked with Azure Support and someone from the development team. They said that you cannot have Windows Admin Center agent installed on your WAC host either through VM extensions or Azure ARC extensions.
Once I uninstalled the extension, removed and reinstalled WAC MSI on the host, it works and issue is resolved.
The developer said they will look at adding a warning or message on the installer to warn against this extension.