Stack Overflow
Stack Overflow

Questions tagged [azure-keyvault]

Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.

Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. By using Key Vault, you can encrypt keys and secrets (such as authentication keys, storage account keys, data encryption keys, .PFX files, and passwords) by using keys that are protected by hardware security modules (HSMs). For added assurance, you can import or generate keys in HSMs (keys never leave the HSM boundary). The HSMs are FIPS 140-2 Level 2 validated.

Key Vault streamlines the key management process and enables you to maintain control of keys that access and encrypt your data. Developers can create keys for development and testing in minutes, and then seamlessly migrate them to production keys. Security administrators can grant (and revoke) permission to keys, as needed.

2719 questions
7
votes
3 answers

Get the latest version of a certificate from an Azure key vault in an ARM template

Creating an ARM template that needs to install an SSL certificate that is located inside of an Azure key vault. If I specify the certificate with the thumbprint, it works…
NightOwl888
  • 55,572
  • 24
  • 139
  • 212
7
votes
2 answers

Invalid provider type specified. CryptographicException

I am trying to run the script GetAppConfigSettings.ps1 from Microsoft docs help setting up a Key Vault The script contains the following # ********************************************************************************************** # Prep the cert…
Kirsten
  • 15,730
  • 41
  • 179
  • 318
7
votes
2 answers

How do I create hierarchical data structures in Azure Key Vaults

I need a way to store hierarchical data in Azure Key Vaults so that I have a structure similar to: AppName /Prod /Data /Test /Data AppName2 /Prod /Data ... As far as I can tell I can only store a flat data structure. I am looking…
Tab
  • 1,702
  • 2
  • 19
  • 39
7
votes
1 answer

Key Vault returns 401 with access token (MSI PowerShell Function App)

I am trying to connect to Keyvault with my Azure Function using PowerShell. The Managed Service Identity (MSI) has been turned on, and in Keyvault I granted the MSI 'get' and 'list' access policies. Using the script below I successfully get an…
Swimburger
  • 6,681
  • 6
  • 36
  • 63
7
votes
1 answer

Azure Key Vault Secrets unmanaged and managed whats the difference?

Within the Azure portal > KeyVaults > Secrets there appears to be two sets of Secrets: "unmanaged" and "managed". When adding a new Secret it appears to go straight to the "unmanaged" section (there is no option to choose). What is the difference…
bytedev
  • 8,252
  • 4
  • 48
  • 56
7
votes
2 answers

SSL Certificates - Import Root and Chain in Azure KeyVault?

I have successfully imported an digital signature certificate (which comes with a root certificate and a chain certificate) in my Azure KeyVault using the command "mport-AzureKeyVaultCertificate -VaultName $vaultName -Name $certificateName…
Chrismaf
  • 73
  • 1
  • 4
7
votes
2 answers

Generate a client certificate with key vault

For our point to site VPN, we want to create a root certificate. So we can create as many client certificates as we want for all the partners that have the need to login in our VPN. (Azure virtual network) Doing this manually works perfect. We…
Identity
  • 1,553
  • 1
  • 22
  • 44
7
votes
1 answer

Ability to use KeyVault in Logic Apps for SQL Connectors

How to access Key Vault secrets in Logic app to provide secured authentication with SQL Connector.? Do we have any possibility to configure the JSON Script of the app? Logic App design work flow: I would like to configure ConnectionName, SQL…
ravi kiran
  • 371
  • 1
  • 5
  • 17
7
votes
2 answers

Azure Key Vault - multiple environments, do I need a Azure Key Vault for each environment?

I am doing some initial research and I am unable to find a clear answer for my problem. The plan is to have multiple environments, (i.e. Dev, Prod, and QA) would I need to have a new instance of Azure Key Vaults for each environment or would I just…
jdave
  • 845
  • 2
  • 11
  • 27
7
votes
2 answers

How to output secret uri in ARM template?

I am unable to output the secret URI from my secret resource in my ARM template. Any ideas on how to do that?
Identity
  • 1,553
  • 1
  • 22
  • 44
7
votes
2 answers

Cannot set secret value in Azure Key Vault

I am trying to crete a "secret value" using Azure Key Vault. I am following a tutorial from Microsoft located here ... https://azure.microsoft.com/en-us/documentation/articles/key-vault-get-started/ I was able to create a Key Vault using…
webworm
  • 10,587
  • 33
  • 120
  • 217
6
votes
2 answers

unexpected keyword argument 'tenant_id' while accessing Azure Key Vault in Python

I was trying to accessing my key vault, but I got always the same error: AppServiceCredential.get_token failed: request() got an unexpected keyword argument 'tenant_id' ManagedIdentityCredential.get_token failed: request() got an unexpected keyword…
SDG6
  • 91
  • 1
  • 8
6
votes
1 answer

How to use DefaultAzureCredential in both local and hosted Environment (Azure and On-Premise) to access Azure Key Vault?

We have a web api(.NET 5) which access some secrets from the Azure KeyVault. In local machine for development, since I am the owner the new vault created, my email has access privilege to keyvault. Hence I selected my account though VS -->Tools>…
ezycoder
  • 103
  • 2
  • 9
6
votes
4 answers

Get X509 Certificate WITH PRIVATE KEY from Azure Keyvault c#

I am currently working on an authentication server developed in C #, this one is hosted on an azure function app, and I use a KeyVault where my secrets are stored. My problem is the following, in my keyvault, I store a certificate (certificate +…
Damien PAYET
  • 161
  • 2
  • 9
6
votes
1 answer

Settings keys to Azure Key Vault for sub-levels

For user secret management, I use user secrets for the development stage and I want to use Azure key vault for release and staging. I have this configuration "ConnectionStrings": { "DefaultConnection": "MySecretConnectionString" }, "SmtpSettings":…
dmi
  • 122
  • 1
  • 5
1 2 3
…
99 100