Search code examples
azuredeploymentazure-devops

AADSTS7000222: The provided client secret keys are expired

Am using Azuredevops & Azure cloud, my deployment got failed with this error AADSTS7000222: The provided client secret keys are expired. Am not sure where to check this , can someone help me on this?

Solution

  • Check the error code here:

    https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes

    AADSTS7000222: InvalidClientSecretExpiredKeysProvided - The provided client secret keys are expired. Visit the Azure portal to create new keys for your app, or consider using certificate credentials for added security: https://aka.ms/certCreds

    Assuming you got the error from pipeline during deployment. Check the service connection you use and update the key or create a new service connection.

    How to find the "service connection" / "app registration" and create a new client secret

    editor's (toraritte) note: The linked documentation does provide the answer, but it assumes everyone knows their way around the Azure portal. In my case, the initial credentials were created using Azure CLI on the terminal with reference to a key vault (didn't even know it will register the security principal as an app), so I spent an hour to find the relevant menus there...

    1. Go to the Azure portal

    2. Go to the search bar at the top and look for "app registration"

      enter image description here

    3. On the "App registrations" page, choose the one that needs to be updated (there will probably be an "expired" tag next to it).

      enter image description here

    4. Go to "Certificates & secrets"

      enter image description here

    5. Click on "New client secret"

      enter image description here

    You can leave the old one there, if you'd like, it doesn't seem to interfere with anything.