title: Enable HTTPS on Azure Front Door custom domain with ARM template deployment
body: <p>I am deploying an Azure Front Door via an ARM template, and attempting to enable HTTPS on a custom domain.</p>
  
  <p>According to the <a href="https://docs.microsoft.com/en-us/azure/frontdoor/front-door-quickstart-template-samples" rel="noreferrer">Azure documentation for Front Door</a>, there is a <a href="https://github.com/Azure/azure-quickstart-templates/blob/master/101-front-door-custom-domain/azuredeploy.json" rel="noreferrer">quick start template</a> to "Add a custom domain to your Front Door and enable HTTPS traffic for it with a Front Door managed certificate generated via DigiCert." However, while this adds a custom domain, it does not enable HTTPS.</p>
  
  <p>Looking at the <a href="https://docs.microsoft.com/en-gb/azure/templates/microsoft.network/2019-04-01/frontdoors" rel="noreferrer">ARM template reference for Front Door</a>, I can't see any obvious way to enable HTTPS, but perhaps I'm missing something?</p>
  
  <p>Notwithstanding the additional information below, I'd like to be able to enable HTTPS on a Front Door custom domain via an ARM template deployment. Is this possible at this time?</p>
  
  <h3>Additional information</h3>
  
  <p>Note that there is a <a href="https://docs.microsoft.com/en-us/rest/api/frontdoorservice/frontdoor/frontendendpoints/enablehttps" rel="noreferrer">REST operation to enable HTTPS</a>, but this does not seem to work with a Front Door managed certificate -</p>
  
  <pre><code>POST https://management.azure.com/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/frontDoors/{frontDoorName}/frontendEndpoints/{frontendEndpointName}/enableHttps?api-version=2019-05-01
  {
      "certificateSource": "FrontDoor",
      "protocolType": "ServerNameIndication",
      "minimumTLSVersion": "1.2"
  }
  </code></pre>
  
  <p>There is also a <a href="https://docs.microsoft.com/en-us/powershell/module/az.frontdoor/enable-azfrontdoorcustomdomainhttps?view=azps-2.7.0" rel="noreferrer"><code>Az</code> PowerShell cmdlet to enable HTTP</a>, which does work.</p>
  
  <pre><code>Enable-AzFrontDoorCustomDomainHttps -ResourceGroupName "lmk-bvt-accounts-front-door" -FrontDoorName "my-front-door" -FrontendEndpointName "my-front-door-rg"
  </code></pre>