The Microsoft Azure Stack Hub Readiness Checker tool is available from the PowerShell Gallery. The tool creates Certificate Signing Requests (CSRs) for an Azure Stack Hub deployment. Certificates should be requested, generated, and validated with enough time to test before deployment.
The Azure Stack Readiness Checker tool (AzsReadinessChecker) performs the following certificate requests:
The implementation of Microsoft Extension Host requires two wildcard SSL certificates, one for the admin portal and one for the tenant portal. Customers who have deployed Azure Stack Hub systems must provide these two additional certificates.
For more information, see Azure Stack Hub public key infrastructure certificate requirements > Validate.
You can use the Azure Stack Readiness Checker tool to validate that the generated PKI certificates are suitable for predeployment. When you validate certificates, schedule enough time to test and get certificates reissued if necessary.
For the latest certificate requirements and validation instructions, see the Microsoft Azure Stack Hub public key infrastructure certificate requirements.