Stack Overflow
Stack Overflow

Questions tagged [azure-keyvault]

Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.

Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. By using Key Vault, you can encrypt keys and secrets (such as authentication keys, storage account keys, data encryption keys, .PFX files, and passwords) by using keys that are protected by hardware security modules (HSMs). For added assurance, you can import or generate keys in HSMs (keys never leave the HSM boundary). The HSMs are FIPS 140-2 Level 2 validated.

Key Vault streamlines the key management process and enables you to maintain control of keys that access and encrypt your data. Developers can create keys for development and testing in minutes, and then seamlessly migrate them to production keys. Security administrators can grant (and revoke) permission to keys, as needed.

2719 questions
9
votes
2 answers

Secure ADF v2 Pipeline Parameter String for WebActivity

I have ADF v2 Pipeline with a WebActivity which has a REST Post Call to get Jwt Access token from AD token api (https://login.microsoftonline.com/myorg.onmicrosoft.com/oauth2/token) I have to pass username and password in the body. Right now, i'm…
Naresh Podishetty
  • 747
  • 4
  • 16
9
votes
2 answers

Storing and retriveing a JKS from Azure key vault

I would like to refer to a Java Key store from the Azure Key vault instead of packaging it with my spring boot application that is deployed as a docker image into Kubernetes cluster. As per Azure documentation, only.PFX files are allowed to be…
mack
  • 345
  • 5
  • 18
9
votes
1 answer

Programatically adding Secrets to Key Vault in C#

I am attempting to put some output from a service I am running in a Key Vault in Azure. The output of my service will be user credentials which is why I want to use Key Vault for this purpose. So far, I have tried the KeyVaultClient's…
Kyle Bachmann
  • 326
  • 3
  • 16
9
votes
1 answer

Where do the parameters for KeyVaultClient.AuthenticationCallback Delegate come from?

I'm trying to call all the vaults in a subscription. The approach I'm using is this - Controller var myClient = new Microsoft.Azure.KeyVault.KeyVaultClient(new…
Pikapops
  • 631
  • 2
  • 8
  • 22
9
votes
2 answers

Error when deploying ARM template that includes certificate stored in key vault

I am attempting to deploy an ARM template from Release Management that includes a 'Microsoft.Web/certificates' resource which references a certificate stored in a key vault. This works fine when the key vault exists in the same subscription as the…
ogoodwin
  • 93
  • 1
  • 4
9
votes
3 answers

How do I access Azure Key Vault using user credentials?

I'm trying to write a simple application to access Azure KeyVault using my own, domain joined credentials. I don't know if it's the credentials part or how I'm accessing KeyVault, but I keep getting an "Invalid URI: The format of the URI could not…
Bonz0
  • 373
  • 2
  • 5
  • 17
9
votes
1 answer

Access Azure Key Vault stored secret using application not deployed in Azure

I've read in most articles that deploying an application in Azure is needed such that an application will be able programmatically access the secrets stored in the Azure Key Vault. Is there a way to not deploy the application in azure and have it…
jeffhaw
  • 91
  • 1
  • 2
8
votes
2 answers

Create Azure Key Vault backed secret scope in Databricks with AAD Token

My ultimate goal is to mount ADLS gen2 containers into my Databricks workspace as part of my Terraform-managed deployment under the auspices of an Azure Service Principal. This is a single deployment that creates all the Azure resources (networking,…
Xophmeister
  • 8,884
  • 4
  • 44
  • 87
8
votes
2 answers

Azure: How to fix "The policy requires the caller '...' to use on-behalf-of (OBO) flow" when accessing Key Vault from App Service?

I have an ASP.net Core 3.1 application running in an Azure App Service. Having started using Azure Key Vault to store connection strings and other secrets for the app, the app is now crashing with an "HTTP Error 500.30 ANCM In-Process Start Failure"…
urig
  • 16,016
  • 26
  • 115
  • 184
8
votes
3 answers

Search secret in Azure key vault

Thousands of secrets are there in my azure key vault. So whenever I need to check/see the secret value at the Azure portal, I will need to scroll up to the end after loading all the secrets multiple times. Is there any shortcut apart from API,…
Amarjeet Kumar
  • 93
  • 2
  • 8
8
votes
5 answers

How to debug a ConflictError when adding an access policy to a key vault using an ARM deployment

I am trying to add access policies to a Keyvault using ARM deployment. Multiple access policies are being deployed at the same time (using copy Arm method and nested templates), and some of them (not always the same ones when I retrigger the…
Lucas
  • 1,171
  • 9
  • 21
8
votes
1 answer

.NET Core 2.2, Azure Web API new X509Certificate2 "The system cannot find the file specified" and "access denied"

My Azure Web API loads a certificate stored as a secret in Key Vault and then attempts to create a new certificate from a byte array. Running locally everything works, but, when deployed to Azure we get Access Denied or The system cannot find the…
user2503078
  • 737
  • 1
  • 8
  • 24
8
votes
3 answers

Can I store JSON in a Azure Key Vault

I have some JSON that I want to store in Azure Key Vault. The data is not hierarchical just like this: { "type": "XXXXXX", "project_id": "XXXXXX", "private_key_id": "XXXXXXXX" } But I have 4 sets of JSON Data and there are about secrets in…
Bryan Schmiedeler
  • 2,977
  • 6
  • 35
  • 74
8
votes
3 answers

Client address is not authorized and caller is not a trusted service in Azure

I'm working on Azure. I have a windows service which accesses the Azure Key Vault. My code looks something like this: public static async Task GetToken(string authority, string resource, string scope) { var authContext = new…
CrazyCoder
  • 2,194
  • 10
  • 44
  • 91
8
votes
5 answers

How to map Azure Functions secrets from Key Vault automatically

I was wondering if it's possible to initialize the queue trigger or even the blob trigger off a connection string that is read from azure vault. Right now, we have to set these data connection via environment settings via blade properties. …
darewreck
  • 2,576
  • 5
  • 42
  • 67
1 2 3
…
99 100