How are we doing? Please help us improve Microsoft Azure. Take our short survey

Questions tagged [azure-keyvault]

Microsoft Azure Key Vault is a cloud-hosted service that allows applications to encrypt/decrypt data using (HSM stored) cryptographic keys and store and retrieve secrets.

Filter by
Sorted by
Tagged with
1 vote
1 answer
29 views

Refereencing a key vault uri using resourceId how can the resource group be referenced in bicep

I have the bicep code module below which adds a customer managed key onto a storage account, the issue is that it expects the key vault to be in thesame resource group as the storage account which may ...
learner's user avatar
  • 667
0 votes
1 answer
52 views

Trigger key rotation from keyvault key rotation policy using powershell

Having done some research on how to use the rotate now option programmatically for Azure key vault keys. I came up with the script below, but it doesn't appear to work. I was wondering if anyone knew ...
learner's user avatar
  • 667
0 votes
0 answers
53 views

Logic App with Managed Identity that gets triggered when a new Azure KeyVault Secret is to Expire

I have managed to create a Logic App that can send an email once an Azure KeyVault secret is about to expire. This works with my own credentials, but I cannot make it work with Managed Identity api ...
Oliver Nilsen's user avatar
0 votes
0 answers
62 views

Using Terraform Script have to get the credentials in Azure KeyVault like subscription id, client id, client secret

I Am trying to deploy Azure storage account using terraform but i have stored my service credentials in Azure Keyvault it should pick the values from vault and deploy the resources.below is script ...
User's user avatar
  • 31
0 votes
0 answers
51 views

Issues with Authenticating GET Operation Status using Management Certificate in Azure

I'm encountering authentication problems while attempting to perform a GET operation statuswithin Azure using a management certificate. I followed the steps outlined in this documentation to generate ...
mohamedjbelii's user avatar
0 votes
1 answer
90 views

Error getting Azure secret value by secret name in python

I am receiving the below error when trying to get the secret value, AttributeError: 'coroutine' object has no attribute 'token' sys:1: RuntimeWarning: coroutine 'AzureCliCredential.get_token' was ...
Auroops's user avatar
  • 23
1 vote
2 answers
117 views

How often do the public facing ip addresses of azure devops change?

I have an Azure keyvault that has been locked down, but I need to access it from Azure DevOps. I know the IP address, but when reading online, it appears this IP address (or range) changes often. Is ...
Jeff Patton's user avatar
0 votes
1 answer
106 views

Unable to recovered azure key-vault , it has soft-delete enable

unfortunately my ARM template deployment (using azure DevOps service connection which has subscription level access) deleted azure keyvault which has soft-delete enable with 90 period but we cannot ...
gs rao's user avatar
  • 11
0 votes
2 answers
83 views

Retrieve a list of strings from one key vault secret

I need to use the Options pattern to populate this class from the key vault public class TestOptions { public string Continent {get; set; } public List<string> Countries{ get; set; } } ...
Xile's user avatar
  • 25
0 votes
2 answers
132 views

Winform application - error on getting Azure secret from KeyVault "DefaultAzureCredential failed to retrieve a token from the included credentials."

I have winform application written in c#. I am trying to fetch azure secrets from Azure KeyVault. I have written below function to fetch the secret. private async Task<string> ...
Irshad Faras's user avatar
0 votes
1 answer
119 views

Azure Keyvault secret auto rotation and notification before expiry

Looking for an automated way to set notification for Azure Keyvault secret expiry before 1 month of time and renew the expiry date on approval based from the Azure Devops pipeline side or any way in ...
Vowneee's user avatar
  • 1,170
-1 votes
1 answer
178 views

Anyone else had issues using an Azure-key-vault-connected pipeline variable group for an "Invoke Azure Function" pipeline check?

I am configuring an Azure DevOps pipeline environment check of type "Invoke Azure Function". I am using a pipeline variable group in order to reference the function key value as a variable. ...
Nekomimi-YT's user avatar
0 votes
0 answers
29 views

Azure KeyVault Request Crashing Web API

We use the Azure KeyVault Secrets to store connection strings, API secrets, etc. We have written a small DLL to fetch the secrets: CTOR: Get the x509 certificate from the server (it is installed on ...
Mike's user avatar
  • 691
0 votes
1 answer
87 views

How do I retrieve value from Azure Keyvault to cypress.config file

I have created an Azure Keyvault with values such as username, password, clientid and secret id. I need to access these values in the env in cypress.config.js env: { baseUrl: BASEURL, username:...
Nischay tv's user avatar
0 votes
1 answer
61 views

How to determine which Azure Keyvault contains certain keys with Databricks dbutils

Is it possible to determine which keyvault holds certain keys with Databricks DBUtils. For example, if I run dbutils.secrets.list("my_scope_dev") I will be able to see existing keys. Is ...
Patterson's user avatar
  • 2,101
1 vote
1 answer
109 views

Encrypt a string using local public PEM file, decrypt using private key in Azure KayVault

I'm trying to write a proof of concept whereby we can encrypt a string using a public key locally and decrypt the string with the associated private key in Azure Key Vault. I can successfully do this ...
Damo's user avatar
  • 1,976
0 votes
1 answer
114 views

Read a secret key from azure key vault in apim

i need to validate a hmac in my apim policy. For which the hmac secret will be stored in azure key vault. Below are the steps that i will be following in my policy Read the secret key from the key ...
Sindhu1990's user avatar
0 votes
1 answer
54 views

Copy Azure KeyVault secrets from one Vault to Another using Powershell, supporting all characters

I need to migrate secrets stored in Azure KeyVault from one vault to another. I have a script which almost works; however, some of the passwords have an & in them, causing the secret not to be ...
Damo's user avatar
  • 1,976
0 votes
1 answer
74 views

APIM connection to KeyVault via SystemAssigned Managed Identity fails

I'm using the following setup described here. https://learn.microsoft.com/en-us/azure/api-management/api-management-howto-properties?WT.mc_id=Portal-fx&tabs=azure-cli I setup APIM with a system ...
komluk's user avatar
  • 447
0 votes
1 answer
168 views

Azure Databricks won't access key vault permissions error from RBAC

I am trying to follow this tutorial: https://learn.microsoft.com/en-us/azure/databricks/getting-started/connect-to-azure-storage I have followed it to a tee but when I have got to Step 6: Connect to ...
geds133's user avatar
  • 1,329
0 votes
1 answer
90 views

Why do I get an Azure key Vault No-cors policy error?

I get this error: localhost:3000' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested ...
ABDUL ANEES's user avatar
0 votes
1 answer
56 views

Az CLI first request takes longer time in a stateless machine

I have a stateless machine that has Az CLI installed in the image (Windows 2022 server) in the following way Write-Host "Installing Azure CLI" Invoke-WebRequest -Uri https://aka.ms/...
eoeo's user avatar
  • 233
-1 votes
1 answer
81 views

Access to setup Azure keyvault principal in Access policy

I am trying to access key vault secret from a web activity. But I am not able to set a principle in the access policy of my vault. I have key administrator accesses. In fact I have the owner and ...
Yoshitha P's user avatar
0 votes
1 answer
82 views

Azure Function Key Vault reference mapping for keys

If your Azure environment is configured correctly, you can use "Azure Key Vault references" in the configuration of an Azure Function to automatically import a secret or a certificate as an ...
lafe's user avatar
  • 113
0 votes
1 answer
62 views

Error attaching trusted_root_certificate to terraform azurerm application gateway

I would like to have an Ingress in my k8s cluster point to a service and pod on my k8s cluster which will serve a tls cert signed from a CA which is not well-known. To do this, I am trying to add a ...
toddmacintyre's user avatar
0 votes
1 answer
85 views

Azure Keyvault Secret with username and ssh key for SFTP

I need to store a username and ssh file in keyvault to use to connect to a remote SFTP server. I can create a secret with a username/password combo. I can create a secret with the ssh keyfile. I can'...
rdsully's user avatar
0 votes
2 answers
64 views

How to integrate azure key vault in spring boot with property source?

I am in new in Azure. I created a small application where I have mentioned one secret JWT-SET-URI in application.properties file. The secret, I have created in azure key vaults. Spring boot version: 3....
Sk Monjurul Haque's user avatar
0 votes
1 answer
56 views

Cannot selects principals on vault acces policy - list is empty. What rights are missing?

I'm trying to grant my app access to my vault on azure but I have no items on the list. If I search I can't see even my own user, nor anything else. I've read the entries on Azure key vault - WebApp ...
Marco's user avatar
  • 1,006
0 votes
0 answers
50 views

Packer -ARM Builder Keyvault access denied to first party service

I have used the build_key_vault_name by brining my own keyvault which is having network restriction and allowed only to my private network within vnet however packer is somewhat using the Azure ...
Jayendran's user avatar
  • 9,937
0 votes
1 answer
119 views

az cli command to create service principal doesn't create certificate in keyvault

I'm running the below lines of my script: Write-Host "Creating KeyVault..." az keyvault create --name mykeyvault --resource-group myrg --location polandcentral Write-Host "Creating ...
Marek M.'s user avatar
  • 3,851
0 votes
2 answers
149 views

How to use azure key vault with github actions?

I have a github action where I am trying insert a secret from azure key vault into my appsettings.json. I was using, https://github.com/Azure/get-keyvault-secrets and it was working but getting a ...
dev_in_training's user avatar
1 vote
1 answer
102 views

Unable to retrieve secrets from Azure KV via Azure functions app

Have the following code to retrieve the secrets from KV using azure functions but when I run test/run, I keep getting 401 unauthorized. I have changed identify to system defined and assigned the ...
hiphop's user avatar
  • 71
0 votes
1 answer
36 views

Keyvault permission error to store Service principal secrets

Error: checking for presence of existing Secret "Project-1-Client-Id" (Key Vault "https://project1-power-bi-kv1.vault.azure.net/"): keyvault.BaseClient#GetSecret: Failure ...
Noothan S's user avatar
0 votes
1 answer
80 views

Does azure-spring-boot-starter-keyvault-certificates libray support Azure AD Workload Identity

I work on a project written in Kotlin and Spring, executed on Azure Kubernetes Service (AKS) and I am using the library com.azure.spring:azure-spring-boot-starter-keyvault-certificates:3.14.0 with the ...
user1610362's user avatar
0 votes
1 answer
89 views

List all the Key Vaults the Application ID has been granted access to via PowerShell?

Running the below code, I can get all the Application IDs granted access to a particular Key Vault. $KVName = 'My-Key-Vault-Name' $KV = Get-AzKeyVault -VaultName $KVName $accessPolicies = $KV....
EZR's user avatar
  • 63
0 votes
1 answer
54 views

Retrieve Azure Vault Secrets by Tag

I'm using the following command to try to query Azure Key Vault secrets by Tag to see if they line up with the values I'm searching for. This is the command I'm using Get-AzKeyVaultSecret -VaultName &...
GT.'s user avatar
  • 547
0 votes
1 answer
125 views

Azure Function : Client address is not authorized and caller is not a trusted service while trying to access Azure Key vault

I have a keyvault in which I have the secrets. I have an Azure function app with a system-assigned identity that has 'Get' secret access on this keyvault. Below is my function code import logging ...
One Developer's user avatar
2 votes
1 answer
97 views

401 Unauthorised while retrieving keys from Key vault in API

I want to know keys present in Azure Key Vault using API. Referred this document: (https://learn.microsoft.com/en-us/rest/api/keyvault/keys/get-keys/get-keys?tabs=HTTP) Using this request to get ...
Samdeep's user avatar
  • 23
0 votes
1 answer
49 views

dotnet KeyVault Certificate client - Certificate issued by a non-integrated CA

Using the dotnet KeyVault Certificate Client is it possible to perform the following actions?: Create a certificate that's "Certificate issued by a non-integrated CA". Putting it into the &...
CM231's user avatar
  • 35
0 votes
1 answer
273 views

How to store and retrieve an SSH Private Key in Azure Key Vault

Question Is there a correct way to store an RSA Private Key in Azure Key Vault such that I can retrieve it (under a different user, on a different device) using powershell cmdlets (ideally the az....
JohnLBevan's user avatar
  • 23.1k
0 votes
1 answer
53 views

Verifying an Azure Key Vault signature without vault access

I sign a file with Azure Key Vault and store the signature. Then, on a machine without vault access, I would like to verify the signature with the original file, the RSA modulus and RSA public ...
P3tray's user avatar
  • 3
0 votes
1 answer
70 views

Signing a string with the Azure Key Vault Python SDK

I am looking to sign a string with a certificate created and stored inside Azure Key Vault. I am using the Python SDK provided by Microsoft to fetch the certificate. I proceed to extract the private ...
P3tray's user avatar
  • 3
0 votes
1 answer
115 views

Binding a Key Vault Certificate with to Azure App Service

I recently acquired an SSL certificate from a provider, and I opted to use a CSR with an Azure Key Vault certificate. Currently, the Key Vault certificate is in an 'Enabled' status, and I have ...
Volodymyr Osadchuk's user avatar
0 votes
1 answer
71 views

Docker-compose with secrets from Azure key-vault secret in multi-container linux web app

Is there a way to set ENV variable from azure key-vault secret for a multi-container linux web app? I am able to set the ENV variables in the app_config from key-vault secret using the @Microsoft....
Fazakas Istvan's user avatar
-1 votes
1 answer
124 views

How to get alerted if a secret changes in Azure KeyVault

I would like to get alerted if the value of a secret on my KeyVault was updated. However, after performing this action, I didn't see any logs in neither the associated Log Analytics nor the Activity ...
havij's user avatar
  • 1,050
0 votes
0 answers
40 views

Can I force a refresh of an AuthenticationHandler following a key rotation via Azure Key Vault without restarting the app?

I have a web app hosted in Azure that uses external login providers that are configured at start up. The clientId and Secrets are read in from Azure Key Vault which is set up to reload on a regular ...
Mark's user avatar
  • 3
0 votes
0 answers
68 views

Dynamic Key Value pair storage class with interface in C# and ASP.NET Core

Let's say I want to have an interface and class to store key value pairs from external provider (e.g. Azure KeyVault). I have this interface: namespace SampleNamespace.Interfaces { public ...
Panagiotis Stefanis's user avatar
0 votes
1 answer
85 views

Get value for new SQL encryption key from azure keyvault

Regarding my previous question, does anyone know how to retrieve the ENCRYPTED_VALUE for rotating the encryption key (see script below), when the new column_master_key_name is generated from the azure ...
RubenHerman's user avatar
  • 1,714
0 votes
1 answer
33 views

secure access to keyvault from desktop app

I created a consol app to access Azure key vault. To do that I put the appId and appSecret in appsettings.json file. Is this secure. I mean putting the secret of the app here to be able to use it and ...
SM1023's user avatar
  • 3
0 votes
0 answers
76 views

Unable to import external key into Azure Key Vault

I followed the same steps as mentioned in this issue. Import key in azure key vault. BYOK using the openssl command instead an vendor HSM tool 1.Generate and download the KEK (Key Encryption Key) as ...
Mahesh's user avatar
  • 1

1
2 3 4 5
56