How to move an Azure subscription containing a Cosmos DB using customer-managed encryption keys?
I'm preparing to transfer an Azure subscription from one directory to another. This subscription contains a productive application which includes, among other resources, a Cosmos DB instance and a Key Vault. The Cosmos DB has at-rest encryption using…
Using a private RSA key stored in key vault to ssh within python code
I am confused about how to use my keys stored in key vault. My scenario: I have an Azure function, which needs to ssh into a virtual machine I use Python's paramiko library to manage ssh access to this VM Basically, I need to mimic the operation in…
I changed my email and now I can't see my Key Vault
I have a VM in Azure running some web services. I use Azure Key Vault to generate an SSL certificate for secure comms. I had to change my email on my Azure account. My account was transferred by MS support, but the Key Vault says my Tenant ID has changed…
How to add my Trusted Signature to my Azure Key Vault?
Hi, I created a trusted signature in my Azure account. I would like to use it to sign excel files. I understand that I need to export it as PFX. I believe I need Azure key vault to do so, correct? If I get Key vault, how do I transfer / add my trusted…
Key Vaults Secrets and RSA Keys
Hi, I am trying to store a RSA key in the ADF Key Vaults so it can be use with a Linked Service. However whenever I try to test SFTP connection it comes back with this error: …
Which IPs need to be allowed in event hub and key vault firewalls for it to work with change notifications
I am trying to setup change notifications for my application using Microsoft Graph and Event Hubs as described here. I set up Azure Event Hubs authentication using shared access signatures (SAS) through the Azure portal. However I am having challenges…
Entra Key Vault Key Rotation Policy to Rotating the Storage Account Key
I created a Key Vault and granted my storage account the Key Vault Officer role. I then setup a rotation policy as outline in the article below. I see versions of keys listed in Key Vault but the last rotation time stamp on the storage account key is…
How to let synapse pipeline identify a value as hexadecimal encoded text
Hello, I want to sign a JWT token using the signing functionality of Azure Key Vault and have generated a private key. I want to send a request to the Key Vault from Azure Synapse pipeline's Web component. The configuration of this web component is as…
Configure Azure Key Vault & Create Credential in Power Automate
Hi Team, I have configured the Azure Key Vault in the Azure Portal. But when I am trying to create credentials in Power Automate, I am getting this error message "Could not verify your user permissions on the Azure key vault". Could you please…
How to fix error: SSL_ERROR_UNRECOGNIZED_NAME_ALERT while browsing a web app
Hello there, I get SSL_ERROR_UNRECOGNIZED_NAME_ALERT error when I browse a web app although it's cert and secret are valid. When the certificate and passphrase are directly uploaded to application gateway listener the web app redirects properly and it…
Unable to disable publicNetworkAccess through ARM template
Hello, I have created a keyvault using arm template and when I add in the properties section: "properties": { "sku": { "family": "A", …
Unable connect Azure KeyVault from App Service using Azure client credentails
Hi Team, I have interesting issue that we are facing in our Production environment. We have AppService that hosts the APi, it connects the KeyVault using Service Principle. In Non-prod it was able to access the KeyVault using ServicePrinciple client…
Troubleshooting "The specified X.509 certificate content is invalid" Error When Importing to Azure Key Vault
I encountered the error "The specified X.509 certificate content is invalid. Error: One or more X.509 properties are invalid." while attempting to import a certificate from Cybersource into Azure Key Vault. The command used was: az keyvault…
Azure Key Vault Managed HSM - Security Domain Certificate Renewal
As documented by Azure, when activating an Azure Key Vault Managed HSM resource you must create a security domain by sending at least three RSA public keys to the HSM. My question is do the certificates/keys need to be updated prior to their set…
How to get Azure key/key vault region?
In cross tenant scenario, like this, how to check the key region with only key/key vault url? I want to use it in create disk encryption set, but it require in same region. And it cost a lot, take a while to create. is there any way to get the region?…
New EV code signing certificate stored in Azure Key Vault triggers windows smart screen warning on signed executables
We have used a GlobalSign issued EV code signing certificate since 2021 and it is due to expire at the end of August 2024. We use this certificate to sign our installer executables as part of our build system, the signing process uses the azuresigntool…
System-assigned Managed Identities fails to remove a KeyVault Access policies on a user
Hi everyone, please help me with a problem that is driving me crazy and I've been chasing it for 2 days without understanding where the problem lies, so I configured a : KeyVault in which I saved a test secret. I created a runbook inside a test…
Azure Key Vault Certificate
I'm currently trying to build a workflow that work run this command automatically. Is there a way I can run this command without needing "az login"? az keyvault certificate import --vault-name "<your-key-vault-name>" -n…
Application settings in Azure Fucntion: AccessToKeyVaultDenied
Hello, To get the connection string of a Azure Storage in Azure Function, we are using the Applicationg Settings in the configuration menu. The problem is that we are receiving the following error: AccessToKeyVaultDenied --> Key Vault reference was…
Secret loading fails in Azure Data Factory Linked Services when I try to use Azure Key vault.
I am trying to allow ADF linked services to use the key vault but I am receiving the error below. I have set the ADF linked service as per below. You can also see I have tried many RBAC roles to try and get it to work.