Manage Nerdio Manager Primary App Registration Secrets

By default, the secrets required by the Nerdio Manager app service in Azure are automatically managed. However, if your organizational policies demand it (for example, due to requirements around ceritifcate expiry/renewal), you can use the Azure portal to manually manage and update the secrets for the Nerdio Manager app service.

To generate a new client secret:

1. Log in to the Microsoft Entra Admin Center (https://entra.microsoft.com).

2. Expand App Registrations.

3. In the application list, locate and select nerdio-nmw-app.

4. Expand Manage, then Certificates & secrets.

5. Select Client Secrets and then + New client secret.

6. Enter a description for the secret and an expiration date in line with your organization's policies.

7. Select Add.

   Warning: Make sure you carefully note down the secret value. This is the only time you'll be able to see the secret value; you won't be able to retrieve it again.

8. View the value of the secret and copy it to a safe location.

To update the client secret in the Nerdio Manager key vault:

1. Log in to the Azure portal (https://portal.azure.com) and select Key vaults from the list of services.

2. Locate the Nerdio Manager key vault (which will have an ID in the format nmw-app-kv-<IDString>), and open it.

3. Expand Objects, then Secrets.

4. Locate and select the secret AzureAD--ClientSecret.

5. Select +New Version.

6. Copy the secret value you recorded above into the Secret value field.

7. Check the Set activation date and Set expiration date boxes, and enter a value for each date.

8. Select Create.

To restart the Nerdio Manager app service:

1. Return to the Azure Portal (https://portal.azure.com) and search for App services.

2. Locate the Nerdio Manager app service, which has an ID in the format nmw-app-<IDString>, and open it.

3. Select Restart at the top of the main pane.

To verify that the client secret has been updated successfully:

Log in to (or refresh) the Nerdio Manager UI, and confirm that no errors are reported in the logs.

Entra ID SQL Authentication

If you have implemented an Entra ID SQL Authentication on the Nerdio Manager SQL database, start at Step 6 in Configure Entra ID SQL Authentication to perform the authentication.

Related Topic

The Azure API Limit Booster article has detailed instructions on how to update the client secrets on other app registrations.