Questions tagged [azure-keyvault]

Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.

Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. By using Key Vault, you can encrypt keys and secrets (such as authentication keys, storage account keys, data encryption keys, .PFX files, and passwords) by using keys that are protected by hardware security modules (HSMs). For added assurance, you can import or generate keys in HSMs (keys never leave the HSM boundary). The HSMs are FIPS 140-2 Level 2 validated.

Key Vault streamlines the key management process and enables you to maintain control of keys that access and encrypt your data. Developers can create keys for development and testing in minutes, and then seamlessly migrate them to production keys. Security administrators can grant (and revoke) permission to keys, as needed.

2719 questions
0
votes
1 answer

Azure Application Access Only Key Vault Keys

I have a multi-tenant application. I need this application to: Be able to read the keys in all vaults of all of the tenants (that grant consent). Not be able to read any of the secrets. I manage to get full access to the Vaults using delegated…
Noam
  • 1,640
  • 4
  • 26
  • 55
0
votes
1 answer

import .cert file to azure keyvault issues

I uploaded a .cert certificate as secure file in azure devops we are using Classic pipelines my pipeline added two additional tasks 1, download secure file 2, Azure Cli task to import .cert file add below script as inline script $certFilePath =…
ezycoder
  • 103
  • 2
  • 9
0
votes
1 answer

ValueError: Invalid password or PKCS12 data when retrieving certificate with a password from azure key vault

I'm writing code to retrieve certificate (as key, cert) from Azure Key Vault. The code runs perfectly when i remove the password from the certificate. How can i make it work with a password for example: abc()^WER123. I've already tried several…
Nat
  • 81
  • 1
  • 6
0
votes
1 answer

retrieve a api-secret-key from Azure Key Vault URI in pure javascript

How can I retrieve an API-secret-key from Azure Key Vault URI (https://.vault.azure.net/secrets/Example ) and pass it to apiKey var in pure javascript code, not in node.js? Can I use something like this: var authorizationEndpoint =…
backnext
  • 249
  • 1
  • 2
  • 14
0
votes
2 answers

access azure key vault from azure web app where ip changes often bc of CI/CD

I have a docker container that accesses azure key vault. this works when I run it locally. I set up an azure web app to host my container, and it cannot access the key vault Forbidden (HTTP 403). Failed to complete operation. Message: Client…
frank
  • 3,036
  • 7
  • 33
  • 65
0
votes
1 answer

How to add multiple secrets to azure key vault using terraform

I have seen examples to add one secret (or) key to azure key vault. but I have a requirement now to add multiple secrets to azure key vault using terraform. How can I achieve that? Can anyone suggest? Thank You. I tried to add resource for each…
Radhika
  • 27
  • 4
0
votes
1 answer

How to pass an integer as the Claim value when creating a new System.Security.Claim in C# (.NET6)?

I'm trying to create a JWT token by signing it with a private key stored in an Azure key vault. The code I have works fine and it generates the token, but the token just wasn't working with the API I'm trying to log into. Generating the token via…
0
votes
1 answer

Optimization for GetSecret with Azure Keyvault

Our main goal for now is optimising the a processing service. The service has a system-assigned managed identity with accespolicies that allow to get a secret. This service makes 4 calls to a keyvault. The first one takes a lot longer than the…
HerbGer
  • 3
  • 1
0
votes
1 answer

az keyvault key rotation-policy update - CLI supported version

From which CLI version below mentioned CLI command is supported az keyvault key rotation-policy update
0
votes
1 answer

How to access Azure Keyvault via private endpoint in Python?

For security purpose, I have disabled public access under Networking Tab in Keyvault and have a private endpoint in place. Both keyvault and private endpoint reside in same resource group. I have an app registration for my application for which I…
potterson11
  • 147
  • 7
0
votes
0 answers

Can one download the private portion of an Azure Vault key in Java?

Context: I am trying to download and save Azure Vault keys on a container - with the purpose of using them later to encrypt or decrypt content. I am using Java with azure-identity 1.7.1 and com.azure.security.keyvault.keys libraries. The problem is…
Dan M
  • 770
  • 1
  • 9
  • 18
0
votes
1 answer

How do I prevent Terraform from destroying the virtual machine after changing keyvault or change of vm credentials?

I'm trying to change the keyvault used by my virtual machine in terraform. When I trying to apply the changes, Terraform then tried to replace the virtual machine with the new key vault. How do I just change the keyvault used by the vm or change the…
0
votes
2 answers

Do we need to do extra security (storing inside Key Vault) for our Azure Function App Settings

I have developed an Azure Function using visual Studio 2019. now when i deployed the Azure Function inside Azure >> all the settings (which contain some sensitive info) inside the local.settings.json, will be added inside the ""Azure Configuration"…
John John
  • 1
  • 72
  • 238
  • 501
0
votes
1 answer

How we can secure the local.settings.json file inside our Azure Function before deploying it to Azure

I am building an Azure Function using .net core 3.1>> and inside its local.settings.json, i am storing some sensitive data, as follow:- { "IsEncrypted": false, "Values": { "AzureWebJobsStorage": "UseDevelopmentStorage=true", …
John John
  • 1
  • 72
  • 238
  • 501
0
votes
1 answer

How can I make MSAL4J and azure-security-keyvault-* work together?

I would like to authenticate with MSAL4J and the certificate stored in Azure Key Vault (AKV). The certificate is a self-signed Azure Key Vault certificate. I could find an example based on a certificate and key stored locally (file system) but not a…
1 2 3
99
100