Questions tagged [azure-keyvault]

Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.

Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. By using Key Vault, you can encrypt keys and secrets (such as authentication keys, storage account keys, data encryption keys, .PFX files, and passwords) by using keys that are protected by hardware security modules (HSMs). For added assurance, you can import or generate keys in HSMs (keys never leave the HSM boundary). The HSMs are FIPS 140-2 Level 2 validated.

Key Vault streamlines the key management process and enables you to maintain control of keys that access and encrypt your data. Developers can create keys for development and testing in minutes, and then seamlessly migrate them to production keys. Security administrators can grant (and revoke) permission to keys, as needed.

2719 questions
4
votes
1 answer

How to pass access token for Azure KeyVault during Visual Studio Code debug

The team I work in is looking into debugging future projects in Visual Studio Code. We have set the debugger to work with our project.The project uses Azure Key Vault for our Application Secrets. The issue is that our Startup breaks when the…
4
votes
2 answers

Failed to decrypt a column encryption key using key store provider: 'AZURE_KEY_VAULT'

I've used Always encrypted for a database table column on a DB on Azure. I've gone through this article - https://learn.microsoft.com/en-us/azure/sql-database/sql-database-always-encrypted-azure-key-vault - followed it very carefully. I have…
M.R.
  • 4,737
  • 3
  • 37
  • 81
4
votes
2 answers

How do you enable Azure Key Vault logging using Terraform 11.14?

How do you enable Azure Key Vault logging using Terraform 11.14?
user2368632
  • 990
  • 1
  • 12
  • 33
4
votes
1 answer

Terraform azure keyVault SetSecret - Forbidden Access denied

I tried to provision a Terraform keyvault secret defining the access policy as below. But I get permission issues. resource "azurerm_key_vault" "keyvault1" { name = "${local.key_vault_one_name}" location …
Avi
  • 1,453
  • 4
  • 18
  • 43
4
votes
1 answer

KeyVaultClient throws FatalExecutionEngineError on debug randomly

When I debug ASP.NET MVC application, KeyVaultClient throws randomly exception: Managed Debugging Assistant 'FatalExecutionEngineError' : 'The runtime has encountered a fatal error. The address of the error was at 0x59eab403, on thread 0x6098. The…
Fka
  • 6,044
  • 5
  • 42
  • 60
4
votes
3 answers

How to fetch certificate stored in Azure KeyVault using Java

I had stored a .pfx file in Azure Keyvault. I have the values of "Certificate Identifier", "Key Identifier" , "Secret Identifier". I want to use .pfx file in a java program. How could I fetch the file from Keyvault? I had searched internet and found…
Sahit
  • 470
  • 6
  • 15
4
votes
1 answer

AddAzureKeyVault introduces delay during dotnet core appstartup, minimum 15 sec delay

my app is asimple dotnetcore app, at CreateWebHostBuilder i have added AddAzureKeyVault with url, clientid and secret, after moving from appsettings.json to AddAzureKeyVault i have noticed a minimum 15 sec delay in the application loading stuck with…
4
votes
2 answers

Azure DevOps Variable secrets between tasks jobs issecret=true

My Keyvault secrets are appearing in clear text in the console, I tried to set the variable to a secret: echo "##vso[task.setvariable variable=nsg-list;issecret=true;isOutput=true]$(nsg-list)" echo "##vso[task.setvariable…
stravze
  • 137
  • 3
  • 13
4
votes
0 answers

Application access to users specific Key Vault on behalf of the user

I am trying to get access to users specific Key Vaults secrets on behalf of the user and am a bit confused about how the Azure IAM access polices work together with Key Vaults access polices. What I want to do is grant the Application access to…
Kaur J
  • 96
  • 3
4
votes
1 answer

Azure KeyVault Vm extension and MSI

Background Our applications are in .Net core. We use Service Fabric for cluster management. We have multiple VM scale sets. We use MSI during Application startup. The code has been working for more than 6 months. We are using code as outlines in…
Scooby
  • 635
  • 3
  • 9
  • 21
4
votes
1 answer

Azure: Connect to key vault from cloud worker via certificate

I have a worker process running as a classic cloud service in Azure. This process needs to retrieve a value from an Azure key vault, and I need to keep the vault authentication secret outside my source tree. Managed identities don't seem to be…
4
votes
1 answer

Create RSA key pair and retrieve public key in Azure key vault

We have a requirement to create RSA key pair using Azure key vault and copy the RSA public key to external system. The requirement is the external system will encrypt the data using public key and internal system will talk to azure key vault and…
Pinaki Mukherjee
  • 1,616
  • 3
  • 20
  • 34
4
votes
1 answer

Secret name is not supporting special character

I have a requirement where I need to store my secret name as fname_lname. But when I tried with underscore I got following error. For time being to bypass the error I wrote a utility to convert from underscore to hyphen and vice versa. Is there any…
lambodar
  • 3,495
  • 5
  • 34
  • 58
4
votes
1 answer

Azure VM gets disconnected from network very often

I have a Windows service running on Azure VM. The service constantly accesses KeyVaults and Web APIs to run some tasks. The logs in my service show this message sometimes while accessing keyvault. Most of the times service can access keyvault, but…
CrazyCoder
  • 2,194
  • 10
  • 44
  • 91
4
votes
3 answers

How to generate unix timestamp in Azure ARM Template

I am creating an ARM template to provision keyvault and it's secrets. I want to generate unix timestamp inside template and supply to nbf and exp attributes which only take integers. Can't find much pointers on this. i am referring to microsoft…
Venkata Dorisala
  • 4,783
  • 7
  • 49
  • 90