配置http_cert时Elastic Stack Azure部署自定义脚本执行失败如何解决

我正按照Elastic官方文档说明，在Azure上部署配置了SSL/TLS和SAML的ELK栈，使用的模板来自Elastic官方Azure市场仓库。
当我不配置http_cert参数时部署一切正常，只要配置该参数就会报错，报错出现在Elastic安装脚本的第533行，具体报错信息如下：

{
  "code": "DeploymentFailed",
  "message": "At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/DeployOperations for usage details.",
  "details": [
    {
      "code": "VMExtensionProvisioningError",
      "message": "
VM has reported a failure when processing extension 'script'. Error message: 
\"Enable failed: failed to execute command: command terminated with exit status=10
[stdout]
[04052021-20:51:32] [wait_for_started] seeing if node is up after sleeping 5 seconds, retry 60/60
[04052021-20:51:33] [wait_for_started] never saw elasticsearch go up locally

 Failed to connect to localhost port 9200: Connection refused
[stderr]
  0     0    0     0    0     0 --:--:--  0:00:14 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:15 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:16 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:17 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:18 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:19 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:20 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:21 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:22 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:23 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:24 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:25 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:26 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:27 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:28 --:--:--     0
  0     0    0     0    0     0      0      0 --:--:--  0:00:29 --:--:--     0
100   151  100   151    0     0      5      0  0:00:30  0:00:30 --:--:--    31
100   151  100   151    0     0      5      0  0:00:30  0:00:30 --:--:--    39
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

#http_cert=$(base64 /mnt/c/.../cert.p12)
#kibana_cert=$(base64 /mnt/c/../kibana.crt)
#kibana_key=$(base64 /mnt/c/../kibana.key)

az deployment group create \
  --resource-group myresourcegroup \
  --template-uri $template_base_uri/$template_version/src/mainTemplate.json \
  --parameters _artifactsLocation=$template_base_uri/$template_version/src/ \
                esVersion=7.10.0 esClusterName=censored\
                adminUsername=censored adminPassword=censored \
                securityBootstrapPassword=censored \
                securityAdminPassword=censored \
                securityKibanaPassword=censored \
                securityLogstashPassword=censored \
                securityBeatsPassword=censored \
                securityApmPassword=censored \
                securityRemoteMonitoringPassword=censored \
                loadBalancerType=internal \
                #esHttpCertBlob="$http_cert" \
                #esHttpCertPassword="censored" \
                #samlMetadataUri="censored" \
                #samlServiceProviderUri="censored"  \
                kibana=Yes \
                #kibanaCertBlob="$kibana_cert" \
                #kibanaKeyBlob="$kibana_key" \
                kibanaKeyPassphrase="censored" \
                logstash=Yes \
                authenticationType=password  \
                adminPassword=censored \
                vNetNewOrExisting=new \
                vNetName=censored \
                vNetExistingResourceGroup=censored \
                vNetNewAddressPrefix=censored \
                vNetLoadBalancerIp=censored \
                vNetClusterSubnetName=censored \
                vNetNewClusterSubnetAddressPrefix=censored \

我尝试了多种方法均返回相同错误，虚拟机内的日志也没有提供可用于定位故障的有效信息，请问该如何解决这个问题？

内容的提问来源于stack exchange，提问作者Benjy Bret Barlow