Questions tagged [azure-keyvault]

Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.

Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. By using Key Vault, you can encrypt keys and secrets (such as authentication keys, storage account keys, data encryption keys, .PFX files, and passwords) by using keys that are protected by hardware security modules (HSMs). For added assurance, you can import or generate keys in HSMs (keys never leave the HSM boundary). The HSMs are FIPS 140-2 Level 2 validated.

Key Vault streamlines the key management process and enables you to maintain control of keys that access and encrypt your data. Developers can create keys for development and testing in minutes, and then seamlessly migrate them to production keys. Security administrators can grant (and revoke) permission to keys, as needed.

2719 questions
4
votes
1 answer

Https in Asp.net core docker with certificate from azure keyvault not working

I have an Asp.net core 3.1 web app in docker and in Azure Service Fabric. The asp.net core web app has https enabled and gets its Certificate from AzureKeyVault. When deployed it seems the https is not responding but http works. The console host…
Arshad Badar Khan
  • 942
  • 1
  • 12
  • 32
4
votes
1 answer

Azure Keyvault stopped working on IIS hosted site

Hi I have a question regarding Azure keyvault and IIS. So our server provider did an windows patch: 2021-04 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5001347) 2021-04 Servicing Stack Update for Windows Server 2016 for…
kowal
  • 61
  • 3
4
votes
2 answers

Can't access KeyVault when running in Visual Studio

I have an App Service that I am developing that needs to access a KeyVault. After getting some assistance from some people on Stackoverflow, I got it to the point where the App Service can access the KeyVault while it is running in Azure. The…
Dave
  • 2,473
  • 2
  • 30
  • 55
4
votes
2 answers

Error while trying to assign a custom role "Secret Reader" to an object ID for an Azure Key Vault

Can anyone tell me why i am getting this error while trying to run this command and assign a custom role "Secret Reader" to a guest account Object Id : az role assignment create --role "Secret Reader" --assignee-object-id…
Pallab
  • 1,915
  • 2
  • 19
  • 46
4
votes
3 answers

Azure.RequestFailedException in Azure.Security.KeyVault.Secrets

I have developed a service running in an Azure Virtual Machine Scale Set that accesses configuration from the Azure Key Vault. Recently, when debugging this service, I have started to receive a RequestFailedException when accessing the…
4
votes
2 answers

App Settings config section from Azure Key Vault

I'm implementing AAD authentication on a Net5 API with the new library Micorosft.Identity.Web The library exposes a method that only accepts an IConfiguration with a section that looks like below in the app.settings Authentication method from…
Aferrercrafter
  • 319
  • 1
  • 6
  • 14
4
votes
1 answer

How to store RSA key in Azure Vault

I want to store my RSA key in Azure vault, is this possible? I did not find any methods to do this. Please find the Microsoft link for this: https://learn.microsoft.com/en-us/javascript/api/@azure/keyvault-keys/?view=azure-node-latest
vijay
  • 701
  • 2
  • 12
  • 26
4
votes
2 answers

Using azure KeyVault in local development

I have seen other posts on this, but none of the answers seem to work. I have an azure function app that I am developing locally. It uses an app setting to get username/password from the key vault. When deployed to azure, it works perfectly. But…
evolmonster
  • 237
  • 1
  • 5
  • 16
4
votes
1 answer

Azure Release pipeline - Azure key vault task VS variable groups

I see that in Azure release pipelines, we can read secrets either by creating a key vault based variable group in library or by using the task "Azure Key vault" in pipeline. Both of them do the same thing i.e. reading the secret value from the key…
4
votes
4 answers

.Net Core 5.0 - Sql Azure + Always Encrypted + Managed Identity

I have a Azure SQL Db with encrypted columns (Always Encrypted with Azure KeyVault). I can access this db from SSMS and I can see the decrypted data. I also have a web app made with .Net Core 5.0 which is deployed to Azure App Service. The app…
AlexB
  • 4,167
  • 4
  • 45
  • 117
4
votes
0 answers

Azure Key Vault Connected Service Visual Studio SharedTokenCacheCredential authentication failed

We have a ASP.NET MVC .NET 4.7.2 project that I want to migrate standard web.config settings (appSettings and ConnectionStrings) into Azure Key Vault. Following these sites as…
OJay
  • 4,763
  • 3
  • 26
  • 47
4
votes
5 answers

How to check if key with the given name exists in the keyvault?

I have keyvault named myKeyVault and there might be a key inside called myKey. I'm reading documentation of Azure CLI: https://learn.microsoft.com/en-us/cli/azure/keyvault/key?view=azure-cli-latest#az_keyvault_key_list but I can't figure out how to…
Yoda
  • 17,363
  • 67
  • 204
  • 344
4
votes
2 answers

Can't reference principalId of user assigned identity for key vault in same arm template

I'm having trouble referencing a user assigned identity that I create alongside a KeyVault instance within the same template. I've searched through documentation on how to reference managed identities in general and I believe it looks like the…
4
votes
1 answer

Setting Azure EnvironmentCredential()

I am on an Azure VM with a dynamic IP adress. When I am logged in, I am able to retrieve secrets using the following python code without any issues; from azure.identity import DefaultAzureCredential from azure.keyvault.secrets import…
4
votes
2 answers

Sign a CSR with Azure Key Vault

How can I achieve the very basic CSR Signing HSM functionality with Azure Key Vault? I had found a very long and manual process to somehow achieve it: Create a private key in Key Vault Create a CSR, digest it with SHA256 Sign the digest with the…
NOP-MOV
  • 792
  • 2
  • 8
  • 28