Stack Overflow
Stack Overflow

Questions tagged [azure-keyvault]

Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.

Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. By using Key Vault, you can encrypt keys and secrets (such as authentication keys, storage account keys, data encryption keys, .PFX files, and passwords) by using keys that are protected by hardware security modules (HSMs). For added assurance, you can import or generate keys in HSMs (keys never leave the HSM boundary). The HSMs are FIPS 140-2 Level 2 validated.

Key Vault streamlines the key management process and enables you to maintain control of keys that access and encrypt your data. Developers can create keys for development and testing in minutes, and then seamlessly migrate them to production keys. Security administrators can grant (and revoke) permission to keys, as needed.

2719 questions
8
votes
5 answers

Cannot acces keyvault secrets through service endpoint in a VSTS release

We're trying to download secrets with the download key vault secrets release task in VSTS. The service principal is add in the key vault's access policies, all rights are checked, including get, list secrets. I created a service endpoint with this…
fvl
  • 121
  • 1
  • 2
  • 6
8
votes
2 answers

Is there any way to access Azure Key Vault without azure AD?

I want to use azure key vault to store connection strings of console app which don't have azure ad authentication. So, Is there any way to access Azure Key Vault without azure AD?
user7745736
  • 87
  • 3
  • 8
8
votes
2 answers

Storing Azure Vault Client ID and Client Secret

I am using .NET Core 2.0 and ASP.NET Core 2.0 for application development. The "test" application is a .NET Core Console application. The core code I am writing is a class library. Once proper testing. I choose to do this since I won't be putting…
mackhax0r
  • 435
  • 2
  • 7
  • 16
8
votes
2 answers

How to secure Azure client Id and Secret without using App Settings of App Service

I am using Azure KeyVault to store my database credentials, Now to access it I have hardcoded client id and client secret in service code. How can I avoid this hard coding as its insecure? 1) I don't want to store client id and client secret in…
Chinta Sai Vamshi
  • 319
  • 3
  • 11
8
votes
2 answers

Why is Azure Key Vault secure?

Why or how is Azure Key Vault secure? I need to store key URI and Client Id and Client Secret on the server, so if anyone grants access to the server on which application is hosted, he'll be able to access keys and secrets stored in the Key Vault.…
nicks
  • 2,161
  • 8
  • 49
  • 101
8
votes
3 answers

Azure Key Vault Access Policy Doesn't Work For Groups

Access policies via groups on Azure Key Vault don't seem to work. If I create a new key vault New-AzureRmKeyVault -VaultName $vaultName And check the keys (which there aren't any of currently) Get-AzureKeyVaultKey -VaultName $vaultName That…
Jeff
  • 35,755
  • 15
  • 108
  • 220
7
votes
1 answer

How to Override Web.config values with Azure KeyVault in .NET Framework 4.7.1

How can I implement Microsoft's Azure KeyVault in a ASP.NET Framework 4.7.1 WebForms application to override values in web.config with values from KeyVault? I do see references that we need a minimum version of .NET Framework 4.7.1 in order to do it…
Bmoe
  • 888
  • 1
  • 15
  • 37
7
votes
4 answers

Token Refresh to Azure KeyVault Access

I'm getting the following error when I attempt to access a Key Vault from my local machine via DefaultAzureCredential() I'm running the following two lines, but I keep getting an error. client = SecretClient(vault_url=,…
et_al
  • 93
  • 1
  • 6
7
votes
1 answer

How can we get tenant id, client id and client secret for Azure Function App?

I am going use key vault for Azure Function App. I am using .NET SDK. Azure.Security.KeyVault.Secrets Azure.Identity Example: string keyVaultUrl = configuration["KeyVaultSettings:Url"]; TokenCredential credential = new…
Rakesh Kumar
  • 2,701
  • 9
  • 38
  • 66
7
votes
2 answers

How can I store production secrets like connection string in ASP.Net Core 3.1 application, hosted on a shared server

Maybe there is an answer to my question already but I was not able to find it after a long time searching. My use case is the following: I have one ASP.Net Core 3.1 web application. It uses MSSQL database to store some information (just FYI I don't…
Xequtor
  • 125
  • 1
  • 12
7
votes
2 answers

Azure App Config, Key Vault & Managed Service Identity (.NET Core 3.1)

I have a simple app service set up to use/test Azure App Configuration The Azure App Config contains 2 non-KeyVault entries, and 1 entry which is a Key Vault reference The Key Vault is set up with the proper Access Policy, allowing Get/List of…
Mike
  • 1,010
  • 1
  • 14
  • 33
7
votes
1 answer

How to set a secret in Azure Key Vault from a local asp.net application

I have a local asp.net core 3.1 application that I want to set a secret in an Azure Key Vault. The following is the code I used from Microsoft: string secretName = "xxSecret"; string keyVaultName =…
user1647160
  • 491
  • 1
  • 10
  • 25
7
votes
1 answer

Difference between access control and access policies in Key Vault

I want to lock down my Key Vault as securely as possible. I believe access control is who can access and modify the Key Vault as a whole. Access policies are who or what can access secrets. Our admin group should be in the access control group. Our…
Bryan Schmiedeler
  • 2,977
  • 6
  • 35
  • 74
7
votes
3 answers

Azure KeyVault Configuration Provider reload values on change

I'm using Azure Key Vault Configuration Provider to read some secrets at app startup. The secrets however keep rotating throughout the day and I want to be able to reload the new values when this rotation happens. What I'm talking about is similar…
reggaemahn
  • 6,272
  • 6
  • 34
  • 59
7
votes
5 answers

Key vault value does not update if value changes in secret as it generates new version for the secret

Below is the Key-Vault problem which I am facing.   I have a Key-Vault which stores some keys which is used in web-app and functions using @Microsoft.KeyVault(SecretUri=)   The value of the secret will change every three days using an automation.…
Kaushik Gayal
  • 133
  • 1
  • 7
1 2 3
…
99 100