Problem: Azure Backup with Disk Encryption and Key Vault Permissions (RBAC)
I’m trying to back up a virtual machine with disk encryption (both OS and data disks) using Recovery Services Vault in Azure. The key used for disk encryption is stored in Azure Key Vault, and I'm using RBAC (Role-Based Access Control) for access…
Key Vault stored Token Rotation capability
Hi Team, There is a SFI requirement to disable the storage SAS key completely from storage account. However, we are now generating SAS token using delegation user key signing method via static website host alternative to store it into kv as a secret.…
How to resolve imported certificate is a self signed certificate error in AFD even though it is a certificate issued by a private CA?
First I created CA in key vault (issuer is OnecertV2-PrivateCA) then generated certificate with the domain name but when I try to add this certificate in AFD it gives the following error: 'cannot add secret as self signed certificate is not allowed in…
Digital Signature error message
I have created a security certificate to go with software other people will download and use. The certificate will successfully install on the computer, however when its used and unspecified error occurs. (see below). The pfx file does not have a…
Entra Key Vault Key Rotation Policy to Rotating the Storage Account Key
I created a Key Vault and granted my storage account the Key Vault Officer role. I then setup a rotation policy as outline in the article below. I see versions of keys listed in Key Vault but the last rotation time stamp on the storage account key is…
How to fetch certificate from azure key vault using Ansible
Hello,Currently we are storing certificate in azure key vault.and manually binding certificate to iis service.but need a way to automate fetch certificate from azure key vault using Ansible and then automate binding.
System-assigned Managed Identities fails to remove a KeyVault Access policies on a user
Hi everyone, please help me with a problem that is driving me crazy and I've been chasing it for 2 days without understanding where the problem lies, so I configured a : KeyVault in which I saved a test secret. I created a runbook inside a test…
Key Vaults Secrets/Key Expiration
Azure Key vault -key has two expiration dates configured at 2 places. While creating the key you can setup an expiration date. Need to specify the date and time. While configuring key rotation policy. Need to specify the expiry time. So, have…
Unable to fetch the secrets from Key vault to Azure DevOps Library group
Hi Team, I am trying to integrate Azure DevOps Library group to Azure key vault to fetch the secrets from here. I have created a service Principal (sampleSP01) and have a key vault (KeyVault01) with RBAC permission model . I have also made the service…
including Azure Key Vault in .NET core 8 app running on on prem IIS
My .NET core 8 app talks to Azure Key Vault when I run it in Visual Studio 2022 because I can see a reference to Azure Key Vault in the Connected Services under the project. The app does not start on the IIS server, because of an authorization fail in…
Azure Key Vault Managed HSM - Security Domain Certificate Renewal
As documented by Azure, when activating an Azure Key Vault Managed HSM resource you must create a security domain by sending at least three RSA public keys to the HSM. My question is do the certificates/keys need to be updated prior to their set…
azure.core.exceptions.HttpResponseError: (Forbidden) Caller is not authorized to perform action on resource.
Getting below error while accessing get_secret function. "azure.core.exceptions.HttpResponseError: (Forbidden) Caller is not authorized to perform action on resource." Inner error: { "code": "ForbiddenByRbac" } Can anyone…
Got a problem when the MARS saving the passpharse to the Key Vault
hello, i got some probleam when im installing the MARS. though that i have already set the rule as the Document siad, the error as follow is coming out. and this is my Key vault setting: as the picture showed, i think that i have already gave the…
What is the maximum limit for key vault secrets
What is the maximum number of secrets can we save in Azure key vault. I am not asking about size.. I already know about that 25K bytes theory, Just wanted to know the max count for secrets.
Unable to sign msix package using Azure Key Vault in Visual Studio 2022
I have followed this article: https://learn.microsoft.com/en-us/windows/msix/desktop/sign-with-akv-cert but I am unable to publish the signed package. I was able to successfully specify the Azure Key Vault Uri and the certificate for signing, however, I…
Issue deploying using Azure CLI with client secret authentication in an Azure DevOps YAML file
We are having issues deploying a BICEP template with Azure CLI in our CI/CD pipeline using a client secret authentication method. The previous key had expired, so we cycled the client secret, added it to the Key Vault for our test environment, and…
What is the least privileged configuration to allow individuals to create user managed identities and assign non privileged roles ? And using terraform to do the same.
Our setup & issue We're using terraform to manage infrastructure. When trying to create a Azure Key Vault with enable_rbac_authorization set to true, terraform silently succeeds however the permission model is set to Vault Access Policy . On…
How can I revert back to the previous version of a certificate when renewing or uploading a new cert in application gateway if the new cert is not working or uploaded by accident
I would like to know if there is a way to use the previous version of a certificate that has been uploaded to the keyvault. Once the certificate has been uploaded to the keyvault and renewing the certificate in the Application Gateway Listener, if the…
How to convert existing API Management named values from Secret type to Key Vault reference
I have received Azure Advisor recommendations regarding API Management security enhancement, specifically stating that 'API Management secret named values should be stored in Azure Key Vault.' In our organization, we have multiple API Management…
Keyvault Failover across regions with private endpoint
Hello, I've read this doc https://learn.microsoft.com/en-us/azure/key-vault/general/disaster-recovery-guidance#failover-across-regions and with reference to the bullet point in that doc, quote "If you're using private link to connect to your key…