Questions tagged [azure-keyvault]

Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.

Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. By using Key Vault, you can encrypt keys and secrets (such as authentication keys, storage account keys, data encryption keys, .PFX files, and passwords) by using keys that are protected by hardware security modules (HSMs). For added assurance, you can import or generate keys in HSMs (keys never leave the HSM boundary). The HSMs are FIPS 140-2 Level 2 validated.

Key Vault streamlines the key management process and enables you to maintain control of keys that access and encrypt your data. Developers can create keys for development and testing in minutes, and then seamlessly migrate them to production keys. Security administrators can grant (and revoke) permission to keys, as needed.

2719 questions
0
votes
1 answer

Database connection string with Azure Keyvault in Azure Function local.setting.json in .NET Core

I am supporting an Azure Function someone wrote in C# in .NET Core 2.2.4. The function app is connecting to a database using a SQL Server account, and username and password are hardcoded in the connection string at the moment. We want to use Azure…
os2499
  • 43
  • 5
0
votes
1 answer

Using .net 7.0, how do I allow my local dev box connect to keyvault and populate appsettings?

I am struggling to find documentation for this.. Here's what I have: I have a working keyvault I am not entirely sure I am using the correct terms, but I want to use the account logged in VS to access the KV. I think that may be called…
Shahar Prish
  • 4,838
  • 3
  • 26
  • 47
0
votes
1 answer

Updating expiration date of key vault secrets using terraform

I am trying to update the expiration date of all the secrets available in the Key Vault. I have written below terraform script and kind of stuck at a point. main.tf file data "azurerm_key_vault" "key_vault_data" { name = var.name …
sac
  • 175
  • 2
  • 14
0
votes
1 answer

Azure Python SDK ClientSecretCredential fetch the values from Azure keyvault

Unable to get the values of tenant_id, client_id,client_secret which are stored in Azure Keyvault, by using library from azure.identity import ClientSecretCredential. I have installed and imported the modules azure-keyvault-secrets azure-identity…
0
votes
1 answer

How do I specify properties for a Azure Key Vault Secret from a Function App?

I'm trying to create an Azure Function that creates a secret in a Key Vault with an expiration time of 30 minutes from now. Just creating a secret with no properties works without any issues: using Azure.Identity; using…
Lasse
  • 1,414
  • 11
  • 19
0
votes
2 answers

Authentication failure in creating item in cosmosdb with csharp code

I am following this tutorial to get started on cosmos db - https://learn.microsoft.com/en-us/azure/cosmos-db/nosql/quickstart-dotnet?tabs=azure-portal%2Cwindows%2Cpasswordless%2Csign-in-azure-cli#create-account In the tutorial, cosmos URI and…
Manu Chadha
  • 15,555
  • 19
  • 91
  • 184
0
votes
1 answer

what is it that I get in java from Azure keyvault certificate

Certificate is created in Azure KeyVault. I will need to download the public and private key from it. When creating certificate in Azure, there are two options for the content:pkcs12 and pem When content type is PEM, I can get the private key and…
Abe
  • 310
  • 3
  • 15
0
votes
2 answers

Why Have Certificates with non-Exportable Keys in Azure Key Vault?

I feel like I must be missing something obvious or I'm being very dense. If I generate a self-signed certificate with Key Vault, or import a PFX with a private key, but do not mark the private key as exportable, as far as I can tell there is…
Emperor Eto
  • 2,456
  • 2
  • 18
  • 32
0
votes
1 answer

How to use RSA in Azure keyvalue Key to create JWE

RSA keypair is in Azure KeyVault Key. I can use keyClient to access the key and use CryptographyClient to…
Abe
  • 310
  • 3
  • 15
0
votes
1 answer

How use Key Vaults in multi appsettings.json files?

I'm using Azure Key Vaults to keep my connection strings safe. It's work well when I'm using just one appsettings.json file, but when I changed it to enviornment divided aproach, I receave an error message saying the connection string was not…
0
votes
1 answer

OpenSSL.crypto.Error when trying to load certificate from Azure Key Vault

I need to implement certificate-based authentication for web API hosted in app service on Azure. To do this I firstly generated .crt certificate file and private key .key file like this: openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes…
devaerial
  • 2,069
  • 3
  • 19
  • 33
0
votes
1 answer

Reading JSON secret from key vault causes API to fail

I have a client secret in the form of a private key that I want to store in an Azure key vault. My appsettings file contains the property to be read like so: "MyConfiguration": { "ClientSecret": "", The secret looks like this: { …
PalBo
  • 2,203
  • 3
  • 22
  • 43
0
votes
1 answer

How can we fetch secrets from private keyvault in Synapse Notebooks

if we select "Allow public access from specific virtual networks and IP addresses" in Networking blade of keyvault. For Databricks notebooks we can fetch secrets by using secret scope, How do we do like that in synapse notebooks. Please help me with…
0
votes
0 answers

Is it Physically Possible for Microsoft to See Azure Key Vault Contents?

Microsoft says it "doesn't see or extract your keys". Maybe it's the ex-lawyer in me, but to me doesn't doesn't mean can't(*). I'm not interested in policies, contracts, audit trails, etc. Can't means it's cryptographically impossible, i.e., a…
Emperor Eto
  • 2,456
  • 2
  • 18
  • 32
0
votes
2 answers

How can we fetch secrets from keyvault in Azure DataBricks if we select "Allow public access from specific virtual networks and IP addresses"

What will be possible solution for this problem? Using Pi-spark language in notebooks, Does any script be using for this problem?