Questions tagged [azure-keyvault]

Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.

Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. By using Key Vault, you can encrypt keys and secrets (such as authentication keys, storage account keys, data encryption keys, .PFX files, and passwords) by using keys that are protected by hardware security modules (HSMs). For added assurance, you can import or generate keys in HSMs (keys never leave the HSM boundary). The HSMs are FIPS 140-2 Level 2 validated.

Key Vault streamlines the key management process and enables you to maintain control of keys that access and encrypt your data. Developers can create keys for development and testing in minutes, and then seamlessly migrate them to production keys. Security administrators can grant (and revoke) permission to keys, as needed.

2719 questions
5
votes
3 answers

How to check if secret is in Azure Key Vault

Every dev on my team has their own personal Azure key vault linked to their local machine. We have a production Azure key vault that our production site looks at. In the code, it looks for a specific secret from the vault. The devs won't have the…
dustinos3
  • 934
  • 3
  • 17
  • 27
5
votes
3 answers

Fetching access token for keyvault

I have published a web app locally and hooked it up to IIS. When I try to navigate to the site it fails at startup with the following error when trying to access the keyvault: Application startup…
user3911247
  • 51
  • 1
  • 1
  • 2
5
votes
1 answer

KeyVault ARM template overrides secrets when re-deploying

I have an ARM template that deploys a Resource Group and includes a Key Vault and secrets. This is deployed through CI/CD and everything works perfectly bar one exception. If I deploy the template the first time, everything works as expected.…
5
votes
1 answer

Maximum number of secrets in Azure Key Vault?

Is there a limit on number of Keys, Certificates etc in a Key Vault?
5
votes
6 answers

Azure ARM Template Keyvault Resources keeps removing other access policies

I created an ARM template to deploy an Azure WebApp that is using Managed Service Identity authentication with KeyVault for secrets. So the ARM template creates the WebApp resource and enables MSI, and also creates the KeyVault resource and add the…
Andrew Nguyen
  • 53
  • 1
  • 4
5
votes
1 answer

Visual Studio Code SQL Server connection to encrypted database with Azure Key Vault (Always Encrypted)

I'm trying to get a connection from VSCode on macOS to a SQL Server database that uses always encrypted mechanism to protect some of the columns. The master key is stored in an Azure Key Vault. Using the always encrypted guide provided by Microsoft…
5
votes
3 answers

Azure Function BlobTrigger connection from KeyVault

Summary: Can I use KeyVault to supply Function the Connection string to a Blob storage binding? I recently moved all my connect strings and secrets out of the Azure Function app settings and into KeyVault. This included the connection strings to…
ThatCreole
  • 495
  • 1
  • 7
  • 17
5
votes
4 answers

Create Key Vault certificate using ARM template

I want to create a Key Vault and add secrets as well as certificates to it using an ARM template. I have been able to find a way of creating a Key Vault as well as adding secrets to it, but couldn't find any relevant solution of adding a new…
5
votes
1 answer

How to generate ENCRYPTED_VALUE for CEK in SQL Server Always Encrypted

It is possible to generate ENCRYPTED_VALUE in different way than by SSMS? I like to enable "Always encrypted" feature for chosen columns but I am wondering about encrypting data by unknown key. In my oppinion there always should be way to decrypt…
5
votes
1 answer

Error: The type or namespace name 'Configuration' does not exist in the namespace 'System.Web'

I'm attempting to use the following code from https://learn.microsoft.com/en-us/azure/key-vault/key-vault-use-from-web-application //add these using statements using Microsoft.IdentityModel.Clients.ActiveDirectory; using…
aBlaze
  • 2,436
  • 2
  • 31
  • 63
5
votes
1 answer

Can't read value from Azure Key Vault

I've implmented Azure Key Vault in my Azure Functions app following this article: https://medium.com/statuscode/getting-key-vault-secrets-in-azure-functions-37620fd20a0b As described in the article, I'm using Managed Service Identity (MSI) but looks…
Sam
  • 26,817
  • 58
  • 206
  • 383
5
votes
1 answer

Generate Key Vault Secrets automatically

We need to create and Key Vault and populate it (or generate) with secrets, then reference them as passwords to SQL servers (PaaS) at the next build step. What would be the best approach to do that?
5
votes
2 answers

Azure Keyvault add Function MSI via ARM

I think Managed Service Identity is a great concept and I love keyvault. However: When I use the script using an incremental resource group deployment: Sample is modified for brevity { "type": "Microsoft.KeyVault/vaults", "name":…
Hoffmania
  • 926
  • 2
  • 7
  • 15
5
votes
3 answers

Service Fabric: Authenticating with Azure KeyVault via cert: "KeySet does not exist"

This is the scenario I am trying to enable: I wish to authenticate to an azure keyvault from my web service application (azure service fabric) via a client certificate. These are the steps I'm following: Add a certificate to my keyvault in azure…
James Wierzba
  • 16,176
  • 14
  • 79
  • 120
5
votes
2 answers

Azure Key Vault with Entity Framework "DefaultConnection" app setting

I’m trying to use Azure Key Vault for storing my web api connection strings for Entity Framework. Ideally I’d like to avoid coupling the key vault nuget packages with my data access code. My dbContext class has two constructors: public…