How do I update expired Azure Container Registry (ACR) client secret keys?

Last updated: February 9, 2026

Context

When deploying applications using Azure Container Registry (ACR) through Porter, you may encounter an authentication error if your client secret keys have expired. This error appears as "ClientSecretCredential authentication failed - AADSTS7000222: The provided client secret keys are expired" during deployment attempts.

Answer

To resolve the expired client secret keys error, you'll need to create a new secret in your Azure account and update it in Porter. Follow these steps:

  1. Log in to your Azure portal

  2. Navigate to the App Registration associated with your Porter integration

  3. Create a new client secret for your Application ID

  4. In your Porter dashboard:

    • Go to the Integrations menu on the left of your dashboard

    • Click on the Cloud Accounts option

    • Select your Azure connection

    • Update the client secret with your newly generated secret

Make sure to safely store your new client secret as it cannot be retrieved once you leave the creation screen in Azure portal.

After updating the secret, your ACR deployments should proceed normally. If you continue to experience issues, please contact Porter support.