New-AzGalleryApplicationVersion fails with could not establish trust relationship for the SSL/TLS secure channel

I am experiencing the exact same issue as described at #25676 . My blob is accessed only via private endpoints and specific subnets, and I receive the same errors whether I include "privatelink" in the blob URI or not.

In the message from @mayankdaruka-msft, there was a new feature you involving a VNet integration that allows the publishing service "trusted access" to blobs in storage accounts behind a firewall/VNet. This would involve placing a managed identity on the gallery and giving the managed identity read permissions to the blob. the inclusion of "managed identity" in the gallery and granting read permission to the blob via "managed identity." This feature was expected to be available by the end of September 2024. As of today, May 8, 2025, I cannot find this option in any of the commands related to Gallery within the Az.Compute module, neither on Azure Portal.

I tested allowing public access to the blob, and it worked well, but I cannot keep this active due to security concerns. What would be the solution or workaround to make this work without exposing the storage account publicly on the internet?

Thank you for your assistance.

> Hi @darrens280,
>
>
>
> The issue here is that your storage account is configured to be accessible from only certain virtual networks and/or IP addresses. Even if you are publishing from a machine in the same virtual network as the storage account, the provided SAS will not be accessible by the publishing service used to publish Gallery Applications, hence the error.
>
>
>
> We are currently working on a VNet integration feature that allows the publishing service "trusted access" to blobs in storage accounts behind a firewall/VNet. This would involve placing a managed identity on the gallery and giving the managed identity read permissions to the blob.
>
>
>
> This feature is currently in progress and should be available by end of September.

_Originally posted by @mayankdaruka-msft in [#25676](https://github.com/Azure/azure-powershell/issues/25676#issuecomment-2272090089)_

Start with New-AzGalleryApplicationVersion and the linked discussion in #25676. The issue names no repository files or tests and asks for an Azure service capability or workaround; completion criteria would need maintainer clarification about whether Az.Compute should expose the managed-identity/VNet integration or document a supported alternative.

Written by the indexing model from the issue text.