Describe the bug
When running the command az webapp config ssl import, it fails with an error:
ERROR: The command failed with an unexpected error. Here is the traceback: ERROR: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
This worked in versions before 2.87.0
Related command
az webapp config ssl import --key-vault ${{ parameters.keyVaultName }}
--key-vault-certificate-name ${{ parameters.dnsZoneAppName }} --name ${{ parameters.appServiceName }}
--resource-group ${{ parameters.resourceGroupName }}
Errors
ERROR: The command failed with an unexpected error. Here is the traceback:
ERROR: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
Traceback (most recent call last):
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 677, in execute
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 820, in _run_jobs_serially
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 812, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/commands.py", line 54, in _ex_handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 789, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 335, in call
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/custom.py", line 6849, in import_ssl_cert
AttributeError: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
To check existing issues, please visit:
https://github.com/Azure/azure-cli/issues
Issue script & Debug output
az webapp config ssl import --key-vault {keyvault} --key-vault-certificate-name {appName} --name {appservice} --resource-group {resourceGroup} --debug
cli.knack.cli: Command arguments: ['webapp', 'config', 'ssl', 'import', '--key-vault', '{keyvault}', '--key-vault-certificate-name', '{appName}', '--name', '{appservice}', '--resource-group', '{resourceGroup}', '--debug']
cli.knack.cli: init debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x000001A925C69C60>, <function OutputProducer.on_global_arguments at 0x000001A925E01D00>, <function CLIQuery.on_global_arguments at 0x000001A925E4FD80>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Using packaged command index for profile 'latest'.
cli.azure.cli.core: Found installed extension 'azure-devops' (azext_devops).
cli.azure.cli.core: Blending packaged core index with local extension index.
cli.azure.cli.core: Modules found from index for 'webapp': ['azure.cli.command_modules.appservice', 'azure.cli.command_modules.serviceconnector']
cli.azure.cli.core: Loading command modules...
cli.azure.cli.core: Loaded command modules in parallel:
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: serviceconnector 0.391 20 331
cli.azure.cli.core: appservice 0.490 91 303
cli.azure.cli.core: Total (2) 0.504 111 634
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name Load Time Groups Commands Directory
cli.azure.cli.core: Total (0) 0.000 0 0
cli.azure.cli.core: Loaded 109 groups, 634 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : webapp config ssl import
cli.azure.cli.core: Command table: webapp config ssl import
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x000001A926443420>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users{user}.azure\commands\2026-06-12.14-13-44.webapp_config_ssl_import.6032.log'.
az_command_data_logger: command args: webapp config ssl import --key-vault {} --key-vault-certificate-name {} --name {} --resource-group {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x000001A92649C4A0>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x000001A92649CAE0>, <function register_global_policy_argument..add_global_policy_argument at 0x000001A92649CC20>, <function register_cache_arguments..add_cache_arguments at 0x000001A92649CCC0>, <function register_upcoming_breaking_change_info..update_breaking_change_info at 0x000001A92649CD60>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x000001A925E01DA0>, <function CLIQuery.handle_query_parameter at 0x000001A925E4FE20>, <function register_ids_argument..parse_ids_arguments at 0x000001A92649CB80>]
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=WebSiteManagementClient
cli.azure.cli.core.auth.persistence: build_persistence: location='C:\Users\{user}\.azure\msal_token_cache.bin', encrypt=True
cli.azure.cli.core.auth.binary_cache: load: C:\Users{user}.azure\msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 99c8f083-aa90-492e-a50b-e82f060e0b80
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Web/sites/{appservice}?api-version=2025-05-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'CommandName': 'webapp config ssl import'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--key-vault --key-vault-certificate-name --name --resource-group --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Web/sites/{appservice}?api-version=2025-05-01 HTTP/1.1" 200 29755
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '29755'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'ETag': '1DCFA63E052456B'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '30a5ffab-9d15-43da-9f02-bde4e3a5c417'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'X-Powered-By': 'ASP.NET'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '4c0b0744-75cc-424d-ab8d-13d667511cae'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260612T121346Z:4c0b0744-75cc-424d-ab8d-13d667511cae'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: B7141061735B48A1AE857CF3050859BD Ref B: AMS231032609019 Ref C: 2026-06-12T12:13:45Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Fri, 12 Jun 2026 12:13:45 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=KeyVaultManagementClient
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: e46a584c-d29e-47ae-b569-a7ddac286ad7
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'CommandName': 'webapp config ssl import'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--key-vault --key-vault-certificate-name --name --resource-group --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01 HTTP/1.1" 200 20386
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '20386'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'x-ms-original-request-ids': 'cfdffeaa-ab20-4831-8f9f-6e42f65db93d'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'x-ms-keyvault-service-version': '2.2.841.0'
cli.azure.cli.core.sdk.policies: 'azure-deprecating': "Due to an RBAC security default, Key Vault's Resource Manager API versions older than 2026-02-01 will retire on 2027-04-01 (https://learn.microsoft.com/en-us/azure/key-vault/general/access-control-default?tabs=azure-cli)"
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '1f8459c9-52a1-4bdb-9d0d-98a26012c759'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '1f8459c9-52a1-4bdb-9d0d-98a26012c759'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260612T121346Z:1f8459c9-52a1-4bdb-9d0d-98a26012c759'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 49F82919DA8F4BF2A867EF8D3457EF13 Ref B: AMS231020512019 Ref C: 2026-06-12T12:13:46Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Fri, 12 Jun 2026 12:13:46 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'CommandName': 'webapp config ssl import'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--key-vault --key-vault-certificate-name --name --resource-group --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01&$skiptoken=HTTP/1.1" 200 15618
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '15618'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'x-ms-original-request-ids': '559e7564-f3dc-4bb8-bf03-b2b584243fe9'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': 'edc28ddf-ec53-4a89-9c81-9665cbbe95b1'
cli.azure.cli.core.sdk.policies: 'x-ms-keyvault-service-version': '2.2.841.0'
cli.azure.cli.core.sdk.policies: 'azure-deprecating': "Due to an RBAC security default, Key Vault's Resource Manager API versions older than 2026-02-01 will retire on 2027-04-01 (https://learn.microsoft.com/en-us/azure/key-vault/general/access-control-default?tabs=azure-cli)"
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3748'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '06327f8c-1d7a-4fe7-a9bc-a38a98b8d578'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '06327f8c-1d7a-4fe7-a9bc-a38a98b8d578'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260612T121347Z:06327f8c-1d7a-4fe7-a9bc-a38a98b8d578'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 3A95A42D1C7B4C628BB7CF5C99A500F8 Ref B: AMS231020512019 Ref C: 2026-06-12T12:13:47Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Fri, 12 Jun 2026 12:13:46 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01&$skiptoken='
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'CommandName': 'webapp config ssl import'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--key-vault --key-vault-certificate-name --name --resource-group --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01&$skiptoken= HTTP/1.1" 200 12424
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '12424'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'x-ms-original-request-ids': 'c0460cfb-81a2-45b7-9e4a-9788252157f8'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '80c1f1a6-2463-473a-8c1c-c18453baa7f8'
cli.azure.cli.core.sdk.policies: 'x-ms-keyvault-service-version': '2.2.841.0'
cli.azure.cli.core.sdk.policies: 'azure-deprecating': "Due to an RBAC security default, Key Vault's Resource Manager API versions older than 2026-02-01 will retire on 2027-04-01 (https://learn.microsoft.com/en-us/azure/key-vault/general/access-control-default?tabs=azure-cli)"
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'b1c8d0ad-e80d-480c-9a19-991d99054a6a'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'b1c8d0ad-e80d-480c-9a19-991d99054a6a'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260612T121347Z:b1c8d0ad-e80d-480c-9a19-991d99054a6a'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 730B9A85C00C48A58A4DDBE63AF28C16 Ref B: AMS231020512019 Ref C: 2026-06-12T12:13:47Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Fri, 12 Jun 2026 12:13:47 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01&$skiptoken=
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'CommandName': 'webapp config ssl import'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--key-vault --key-vault-certificate-name --name --resource-group --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01&$skiptoken=3ZBRa4MwFIX/Sxh7WoxarZ0gow/CYHUdXbe14kuM0WZqIkl0s%2BJ/X8oe1t8wuNyHcw/n8p0JcPqtN4zXCoQT%2BIhf9/HbbvsSgxCctO5UiFCLOa5oS7m28LmX1CKiRarPFZGs00xwhRy8IO6SYliURQ49h3hwVZIABt597geOvSQeQZ0UAyuoVChhRAolSm090fEd941Gw2WrB9wxOBiLSY1c2/Whbca5vVG1eSVqyiPSEn10T2Pu%2BgMZnTo9pCu8OF5rn%2BbWbw7PNmmbPv2KIjDf/XFu%2BaNoCkNrRCzbdVVJWmFNi/0l33Cvdwn49SdY1lQaacquqslAmP2jcjIwg/kH HTTP/1.1" 200 21661
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '21661'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'x-ms-original-request-ids': '37088d01-a73e-4e1e-9cf9-b36a104f6c88'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '80646e6f-777d-46eb-bdca-1bf6e54ccb03'
cli.azure.cli.core.sdk.policies: 'x-ms-keyvault-service-version': '2.2.841.0'
cli.azure.cli.core.sdk.policies: 'azure-deprecating': "Due to an RBAC security default, Key Vault's Resource Manager API versions older than 2026-02-01 will retire on 2027-04-01 (https://learn.microsoft.com/en-us/azure/key-vault/general/access-control-default?tabs=azure-cli)"
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'ce4794ab-9e41-4bea-8607-028205ea88ed'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'ce4794ab-9e41-4bea-8607-028205ea88ed'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260612T121347Z:ce4794ab-9e41-4bea-8607-028205ea88ed'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 717C6300C9814635AD41EA0B8AFDFF4F Ref B: AMS231020512019 Ref C: 2026-06-12T12:13:47Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Fri, 12 Jun 2026 12:13:47 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.azclierror: Traceback (most recent call last):
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 677, in execute
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 820, in _run_jobs_serially
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 812, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/commands.py", line 54, in _ex_handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 789, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 335, in call
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/custom.py", line 6849, in import_ssl_cert
AttributeError: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
cli.azure.cli.core.azclierror: The command failed with an unexpected error. Here is the traceback:
az_command_data_logger: The command failed with an unexpected error. Here is the traceback:
cli.azure.cli.core.azclierror: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
Traceback (most recent call last):
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 677, in execute
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 820, in _run_jobs_serially
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 812, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/commands.py", line 54, in _ex_handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 789, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 335, in call
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/custom.py", line 6849, in import_ssl_cert
AttributeError: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
az_command_data_logger: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
Traceback (most recent call last):
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 677, in execute
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 820, in _run_jobs_serially
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 812, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/commands.py", line 54, in _ex_handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 789, in run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 335, in call
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/custom.py", line 6849, in import_ssl_cert
AttributeError: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
To check existing issues, please visit: https://github.com/Azure/azure-cli/issues
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x000001A9264436A0>]
az_command_data_logger: exit code: 1
cli.main: Command ran in 4.666 seconds (init: 0.353, invoke: 4.313)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 8337 in cache file under C:\Users{user}.azure\telemetry\20260612141348090
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry_init.pyc C:\Users{user}.azure C:\Users{user}.azure\telemetry\20260612141348090"
telemetry.process: Return from creating process 28092
telemetry.main: Finish creating telemetry upload process.
Expected behavior
The certificate is properly imported to the appservice
Environment Summary
"azure-cli": "2.87.0",
"azure-cli-core": "2.87.0",
"azure-cli-telemetry": "1.1.0",
"extensions": {
"application-insights": "1.2.3",
"azure-devops": "1.0.4"
}
Additional context
No response
Describe the bug
When running the command
az webapp config ssl import, it fails with an error:ERROR: The command failed with an unexpected error. Here is the traceback: ERROR: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'This worked in versions before 2.87.0
Related command
az webapp config ssl import
--key-vault ${{ parameters.keyVaultName }}--key-vault-certificate-name ${{ parameters.dnsZoneAppName }}
--name ${{ parameters.appServiceName }}--resource-group ${{ parameters.resourceGroupName }}
Errors
ERROR: The command failed with an unexpected error. Here is the traceback:
ERROR: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
Traceback (most recent call last):
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 677, in execute
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 820, in _run_jobs_serially
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 812, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/commands.py", line 54, in _ex_handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 789, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 335, in call
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/custom.py", line 6849, in import_ssl_cert
AttributeError: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
To check existing issues, please visit:
https://github.com/Azure/azure-cli/issues
Issue script & Debug output
az webapp config ssl import --key-vault {keyvault} --key-vault-certificate-name {appName} --name {appservice} --resource-group {resourceGroup} --debug
cli.knack.cli: Command arguments: ['webapp', 'config', 'ssl', 'import', '--key-vault', '{keyvault}', '--key-vault-certificate-name', '{appName}', '--name', '{appservice}', '--resource-group', '{resourceGroup}', '--debug']
cli.knack.cli: init debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x000001A925C69C60>, <function OutputProducer.on_global_arguments at 0x000001A925E01D00>, <function CLIQuery.on_global_arguments at 0x000001A925E4FD80>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Using packaged command index for profile 'latest'.
cli.azure.cli.core: Found installed extension 'azure-devops' (azext_devops).
cli.azure.cli.core: Blending packaged core index with local extension index.
cli.azure.cli.core: Modules found from index for 'webapp': ['azure.cli.command_modules.appservice', 'azure.cli.command_modules.serviceconnector']
cli.azure.cli.core: Loading command modules...
cli.azure.cli.core: Loaded command modules in parallel:
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: serviceconnector 0.391 20 331
cli.azure.cli.core: appservice 0.490 91 303
cli.azure.cli.core: Total (2) 0.504 111 634
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name Load Time Groups Commands Directory
cli.azure.cli.core: Total (0) 0.000 0 0
cli.azure.cli.core: Loaded 109 groups, 634 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : webapp config ssl import
cli.azure.cli.core: Command table: webapp config ssl import
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x000001A926443420>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users{user}.azure\commands\2026-06-12.14-13-44.webapp_config_ssl_import.6032.log'.
az_command_data_logger: command args: webapp config ssl import --key-vault {} --key-vault-certificate-name {} --name {} --resource-group {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x000001A92649C4A0>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x000001A92649CAE0>, <function register_global_policy_argument..add_global_policy_argument at 0x000001A92649CC20>, <function register_cache_arguments..add_cache_arguments at 0x000001A92649CCC0>, <function register_upcoming_breaking_change_info..update_breaking_change_info at 0x000001A92649CD60>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x000001A925E01DA0>, <function CLIQuery.handle_query_parameter at 0x000001A925E4FE20>, <function register_ids_argument..parse_ids_arguments at 0x000001A92649CB80>]
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=WebSiteManagementClient
cli.azure.cli.core.auth.persistence: build_persistence: location='C:\Users\{user}\.azure\msal_token_cache.bin', encrypt=True
cli.azure.cli.core.auth.binary_cache: load: C:\Users{user}.azure\msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 99c8f083-aa90-492e-a50b-e82f060e0b80
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Web/sites/{appservice}?api-version=2025-05-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'CommandName': 'webapp config ssl import'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--key-vault --key-vault-certificate-name --name --resource-group --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{subscription}/resourceGroups/{resourceGroup}/providers/Microsoft.Web/sites/{appservice}?api-version=2025-05-01 HTTP/1.1" 200 29755
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '29755'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'ETag': '1DCFA63E052456B'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '30a5ffab-9d15-43da-9f02-bde4e3a5c417'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'X-Powered-By': 'ASP.NET'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '4c0b0744-75cc-424d-ab8d-13d667511cae'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260612T121346Z:4c0b0744-75cc-424d-ab8d-13d667511cae'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: B7141061735B48A1AE857CF3050859BD Ref B: AMS231032609019 Ref C: 2026-06-12T12:13:45Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Fri, 12 Jun 2026 12:13:45 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=KeyVaultManagementClient
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: e46a584c-d29e-47ae-b569-a7ddac286ad7
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'CommandName': 'webapp config ssl import'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--key-vault --key-vault-certificate-name --name --resource-group --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01 HTTP/1.1" 200 20386
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '20386'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'x-ms-original-request-ids': 'cfdffeaa-ab20-4831-8f9f-6e42f65db93d'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'x-ms-keyvault-service-version': '2.2.841.0'
cli.azure.cli.core.sdk.policies: 'azure-deprecating': "Due to an RBAC security default, Key Vault's Resource Manager API versions older than 2026-02-01 will retire on 2027-04-01 (https://learn.microsoft.com/en-us/azure/key-vault/general/access-control-default?tabs=azure-cli)"
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '1f8459c9-52a1-4bdb-9d0d-98a26012c759'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '1f8459c9-52a1-4bdb-9d0d-98a26012c759'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260612T121346Z:1f8459c9-52a1-4bdb-9d0d-98a26012c759'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 49F82919DA8F4BF2A867EF8D3457EF13 Ref B: AMS231020512019 Ref C: 2026-06-12T12:13:46Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Fri, 12 Jun 2026 12:13:46 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'CommandName': 'webapp config ssl import'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--key-vault --key-vault-certificate-name --name --resource-group --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01&$skiptoken=HTTP/1.1" 200 15618
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '15618'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'x-ms-original-request-ids': '559e7564-f3dc-4bb8-bf03-b2b584243fe9'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': 'edc28ddf-ec53-4a89-9c81-9665cbbe95b1'
cli.azure.cli.core.sdk.policies: 'x-ms-keyvault-service-version': '2.2.841.0'
cli.azure.cli.core.sdk.policies: 'azure-deprecating': "Due to an RBAC security default, Key Vault's Resource Manager API versions older than 2026-02-01 will retire on 2027-04-01 (https://learn.microsoft.com/en-us/azure/key-vault/general/access-control-default?tabs=azure-cli)"
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3748'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '06327f8c-1d7a-4fe7-a9bc-a38a98b8d578'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '06327f8c-1d7a-4fe7-a9bc-a38a98b8d578'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260612T121347Z:06327f8c-1d7a-4fe7-a9bc-a38a98b8d578'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 3A95A42D1C7B4C628BB7CF5C99A500F8 Ref B: AMS231020512019 Ref C: 2026-06-12T12:13:47Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Fri, 12 Jun 2026 12:13:46 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01&$skiptoken='
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'CommandName': 'webapp config ssl import'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--key-vault --key-vault-certificate-name --name --resource-group --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01&$skiptoken= HTTP/1.1" 200 12424
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '12424'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'x-ms-original-request-ids': 'c0460cfb-81a2-45b7-9e4a-9788252157f8'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '80c1f1a6-2463-473a-8c1c-c18453baa7f8'
cli.azure.cli.core.sdk.policies: 'x-ms-keyvault-service-version': '2.2.841.0'
cli.azure.cli.core.sdk.policies: 'azure-deprecating': "Due to an RBAC security default, Key Vault's Resource Manager API versions older than 2026-02-01 will retire on 2027-04-01 (https://learn.microsoft.com/en-us/azure/key-vault/general/access-control-default?tabs=azure-cli)"
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'b1c8d0ad-e80d-480c-9a19-991d99054a6a'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'b1c8d0ad-e80d-480c-9a19-991d99054a6a'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260612T121347Z:b1c8d0ad-e80d-480c-9a19-991d99054a6a'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 730B9A85C00C48A58A4DDBE63AF28C16 Ref B: AMS231020512019 Ref C: 2026-06-12T12:13:47Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Fri, 12 Jun 2026 12:13:47 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01&$skiptoken=
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '27e0780f-6658-11f1-ac26-7ced8d0f9f34'
cli.azure.cli.core.sdk.policies: 'CommandName': 'webapp config ssl import'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--key-vault --key-vault-certificate-name --name --resource-group --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.87.0 (MSI) azsdk-python-core/1.39.0 Python/3.13.13 (Windows-11-10.0.26200-SP0)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{subscription}/providers/Microsoft.KeyVault/vaults?api-version=2025-05-01&$skiptoken=3ZBRa4MwFIX/Sxh7WoxarZ0gow/CYHUdXbe14kuM0WZqIkl0s%2BJ/X8oe1t8wuNyHcw/n8p0JcPqtN4zXCoQT%2BIhf9/HbbvsSgxCctO5UiFCLOa5oS7m28LmX1CKiRarPFZGs00xwhRy8IO6SYliURQ49h3hwVZIABt597geOvSQeQZ0UAyuoVChhRAolSm090fEd941Gw2WrB9wxOBiLSY1c2/Whbca5vVG1eSVqyiPSEn10T2Pu%2BgMZnTo9pCu8OF5rn%2BbWbw7PNmmbPv2KIjDf/XFu%2BaNoCkNrRCzbdVVJWmFNi/0l33Cvdwn49SdY1lQaacquqslAmP2jcjIwg/kH HTTP/1.1" 200 21661
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '21661'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'x-ms-original-request-ids': '37088d01-a73e-4e1e-9cf9-b36a104f6c88'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '80646e6f-777d-46eb-bdca-1bf6e54ccb03'
cli.azure.cli.core.sdk.policies: 'x-ms-keyvault-service-version': '2.2.841.0'
cli.azure.cli.core.sdk.policies: 'azure-deprecating': "Due to an RBAC security default, Key Vault's Resource Manager API versions older than 2026-02-01 will retire on 2027-04-01 (https://learn.microsoft.com/en-us/azure/key-vault/general/access-control-default?tabs=azure-cli)"
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-AspNet-Version': '4.0.30319'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'ce4794ab-9e41-4bea-8607-028205ea88ed'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'ce4794ab-9e41-4bea-8607-028205ea88ed'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260612T121347Z:ce4794ab-9e41-4bea-8607-028205ea88ed'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 717C6300C9814635AD41EA0B8AFDFF4F Ref B: AMS231020512019 Ref C: 2026-06-12T12:13:47Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Fri, 12 Jun 2026 12:13:47 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.azclierror: Traceback (most recent call last):
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 677, in execute
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 820, in _run_jobs_serially
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 812, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/commands.py", line 54, in _ex_handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 789, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 335, in call
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/custom.py", line 6849, in import_ssl_cert
AttributeError: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
cli.azure.cli.core.azclierror: The command failed with an unexpected error. Here is the traceback:
az_command_data_logger: The command failed with an unexpected error. Here is the traceback:
cli.azure.cli.core.azclierror: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
Traceback (most recent call last):
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 677, in execute
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 820, in _run_jobs_serially
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 812, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/commands.py", line 54, in _ex_handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 789, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 335, in call
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/custom.py", line 6849, in import_ssl_cert
AttributeError: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
az_command_data_logger: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
Traceback (most recent call last):
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 677, in execute
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 820, in _run_jobs_serially
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 812, in _run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/commands.py", line 54, in _ex_handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 789, in run_job
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/init.py", line 335, in call
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
File "D:\a_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appservice/custom.py", line 6849, in import_ssl_cert
AttributeError: 'WebSiteManagementClient' object has no attribute 'app_service_certificate_orders'
To check existing issues, please visit: https://github.com/Azure/azure-cli/issues
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x000001A9264436A0>]
az_command_data_logger: exit code: 1
cli.main: Command ran in 4.666 seconds (init: 0.353, invoke: 4.313)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 8337 in cache file under C:\Users{user}.azure\telemetry\20260612141348090
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry_init.pyc C:\Users{user}.azure C:\Users{user}.azure\telemetry\20260612141348090"
telemetry.process: Return from creating process 28092
telemetry.main: Finish creating telemetry upload process.
Expected behavior
The certificate is properly imported to the appservice
Environment Summary
"azure-cli": "2.87.0",
"azure-cli-core": "2.87.0",
"azure-cli-telemetry": "1.1.0",
"extensions": {
"application-insights": "1.2.3",
"azure-devops": "1.0.4"
}
Additional context
No response