Questions tagged [azure-keyvault]

Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.

Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. By using Key Vault, you can encrypt keys and secrets (such as authentication keys, storage account keys, data encryption keys, .PFX files, and passwords) by using keys that are protected by hardware security modules (HSMs). For added assurance, you can import or generate keys in HSMs (keys never leave the HSM boundary). The HSMs are FIPS 140-2 Level 2 validated.

Key Vault streamlines the key management process and enables you to maintain control of keys that access and encrypt your data. Developers can create keys for development and testing in minutes, and then seamlessly migrate them to production keys. Security administrators can grant (and revoke) permission to keys, as needed.

2719 questions
6
votes
2 answers

Azure - authenticating to KeyVault using Service Principle returns an Unauthorized exception

I'm trying to access KeyVault from an .net Core console application, using a Service Principle (I have the App Id and App Secret). Here's my code: var client = new KeyVaultClient(GetAccessToken); var secret =…
Rob
  • 65
  • 1
  • 6
6
votes
2 answers

How can I cache data using Azure Key Vault?

I want to use Azure Key Vault for my PAAS application. Is there any way to cache the data instead of making calls every time to Key Vault to retrieve a key?
namrata
  • 2,235
  • 5
  • 28
  • 35
6
votes
2 answers

Passing KeyVault secrets to .net core 2 xUnit/MsTest in VSTS

I have several secrets stored in Azure KeyVault. Unfortunately I cannot find a way to pass parameters to my .net Core 2.0 test run via VSTS (Visual Studio Team Services) Documentation says that Keyvault secrets can only be supplied via VSTS…
Adriaan de Beer
  • 1,136
  • 13
  • 23
6
votes
3 answers

Azure KeyVault - too many connections from Azure Functions

We've got some Azure Functions defined in a class using [FunctionName] attributes from the WebJobs SDK. There are several functions in the class and they all need access to secrets stored in an Azure KeyVault. The problem is that we have many…
Colin Dembovsky
  • 165
  • 3
  • 7
6
votes
1 answer

Using Azure Key Vault for storing username and password

I am working on an app where I want to store username and password for service account which will be used by a daemon service. The idea is to provide application administrator a dashboard where he / she can enter credentials for service account and…
Rahul Patil
  • 5,656
  • 6
  • 37
  • 65
6
votes
2 answers

How do I fix an "Operation 'set' not allowed" error when creating an Azure KeyVault secret programmatically?

I'm trying to create an Azure KeyVault secret programmatically using Microsoft. Azure.KeyVault.KeyVaultClient. For my purposes, I am getting my auth token authenticating with a certificate as an Azure AD application. The Azure AD application already…
SAGExSDX
  • 683
  • 6
  • 12
6
votes
1 answer

Not able to set same name for Azure key Vault in different Subscription

I am trying to set same name to all my Key Vault in different Subscription but getting below error. New-AzureRmKeyVault : VaultAlreadyExists: The name 'AKeyVault' is already in use. At line:1 char:1 + New-AzureRmKeyVault -VaultName AKeyVault…
NKDev
  • 456
  • 3
  • 8
  • 23
5
votes
2 answers

Is there a way to work with Azure Key Vault in localhost with Managed Identity on Visual Studio?

I want to add Azure Key Vault to my C# app but I'd like to run the code locally. Is there a possible way? A lot of documentation says that AKV only works on Azure env but here a Microsoft developer says in the video that the sample code they are…
5
votes
1 answer

Get Key Vault ServiceClient within Program.cs (startup) in a .NET 6 app

I've created an Entity Framework DbContext which I initialize in the Program (Startup.cs is not needed anymore in .NET 6). The connectionstring is dependent on a SQL password inside Azure Key Vault. So the registration of both Key Vault and…
5
votes
2 answers

Error accessing Key Vault while executing Azure Synapse Notebook via Synapse Pipelines

I'm trying to execute an Azure Synapse Notebook using Notebook Activity in Synapse Pipelines and it keeps coming up with errors while debuging the Pipelines, the Notebook is using TokenLibrary.getSecret() and it looks like accessing key vault is the…
5
votes
2 answers

Azure Function configuration does not get latest version of Key Vault secret

The function never reads the latest version of the secret. It always reads the first one it was configured to use, i.e. the versioned one. Even after restarting the function or re-publishing it, it always reads the versioned secret it was first…
BB7788
  • 91
  • 3
5
votes
2 answers

Sign JWT token using Azure Key Vault

I'm using a private key to sign a JWT token, which works as expected. However, I'd like to leverage Azure Key Vault to do the signing for me, so that the private key doesn't leave KeyVault. I'm struggling to get this to work, but not sure…
Dan
  • 5,692
  • 3
  • 35
  • 66
5
votes
1 answer

Create a new version of key vault secret using Terraform

I am trying to create a new version of key vault secret which already exists. But it always gives me error while using the below code when the secret already exist. Is there any way to create new version of secret. resource…
Rohit
  • 370
  • 2
  • 11
5
votes
2 answers

Docker container app service in azure. How to use DefaultAzureCredential for keyvault

I have a container app service running in azure and it works fine. However if i want to run this container locally it fails because it cant authenticate to read the key vault in azure. .ConfigureAppConfiguration((context, config) => { var…
CathalMF
  • 9,705
  • 6
  • 70
  • 106
5
votes
1 answer

Use Terraform to create an AKS with an RSA key maintained by Key Vault

I am trying to create an AKS (Azure Kubernetes Service) with Terraform and I want to set an ssh_key for the "linux_profile" of the AKS nodes. The only relevant tutorial for creating an AKS with terraform I found is this and it uses a local file in…
Maximilian Jesch
  • 623
  • 7
  • 16