Config-server with Azure Key Vault Cloud config
Hi guys I really need some insight here. I have an actual setup of config-server + centralized git configuration repo + App client (running on an k8 cluster) App connects to config-server, that connects to the git repo, fetch the configuration and…
List all HSM active and deleted
Hi, How to list all HSMs down which are actively used and associated with Key Vault, and which has been deleted but not purged? A list of Key vaults can be retrieved by Azure portal or CLI, but nowhere for HSMs.
"errorMessage": "interaction_required: AADSTS16000: User account '{EUII Hidden}' from identity provider 'live.com' does not exist in tenant 'Microsoft Services' and cannot access the application '74658136-14ec-4630-ad9b-26e160f
Hello there Azure community, Realized an Azure account is connected to my hotmail email address/microsoft account when attempting to remove an expired credit card from the subscription section. The amount of things that seem to be configured within…
Installing keyvault extension on Azure Linux - keyvault extension not respecting keyVaultId
Hello there, I'm trying to setup a simple prototype where I can pull a certificate from AKV automatically to my Azure Linux VM. Please note that we have the VM and the KeyVault created in the same subscription but different ResourceGroups. Assume the…
Azure Databricks and Key vault key versioning
We are building a Data encryption solution and are using pyspark AES encrypt and AES Decrypt function to encrypt the PII columns in the Databricks tables on Unity catalog. We have created views on top of these tables and using the same encryption key we…
Entra Key Vault Key Rotation Policy to Rotating the Storage Account Key
I created a Key Vault and granted my storage account the Key Vault Officer role. I then setup a rotation policy as outline in the article below. I see versions of keys listed in Key Vault but the last rotation time stamp on the storage account key is…
Expiry time of a key vs key rotation policy
Hi all, I have a question let say i have this kind of code rsa_key = key_client.create_rsa_key(key_name, size=4096) actions = [ KeyRotationLifetimeAction( KeyRotationPolicyAction.rotate, time_before_expiry="P30D" …
Azure Key Vault Managed HSM - Security Domain Certificate Renewal
As documented by Azure, when activating an Azure Key Vault Managed HSM resource you must create a security domain by sending at least three RSA public keys to the HSM. My question is do the certificates/keys need to be updated prior to their set…
Set-AzSqlInstanceTransparentDataEncryptionProtector Configuration Error
Error: Set-AzSqlInstanceTransparentDataEncryptionProtector: Long running operation failed with status 'Failed'. Additional Info:'The requested server key was not found.' The keyid that i used is already the one generated in the…
Digital Signature error message
I have created a security certificate to go with software other people will download and use. The certificate will successfully install on the computer, however when its used and unspecified error occurs. (see below). The pfx file does not have a…
Character restrictions when creating an EV Certificate in Key Vault
Hi, I am trying to create a certificate for code signing within azure key vault (Web Portal). Our official company name contains a + and - character. Is there a restriction using those for the Subject entry CN=... ? as soon as either of those…
Using a private RSA key stored in key vault to ssh within python code
I am confused about how to use my keys stored in key vault. My scenario: I have an Azure function, which needs to ssh into a virtual machine I use Python's paramiko library to manage ssh access to this VM Basically, I need to mimic the operation in…
I changed my email and now I can't see my Key Vault
I have a VM in Azure running some web services. I use Azure Key Vault to generate an SSL certificate for secure comms. I had to change my email on my Azure account. My account was transferred by MS support, but the Key Vault says my Tenant ID has changed…
How to add my Trusted Signature to my Azure Key Vault?
Hi, I created a trusted signature in my Azure account. I would like to use it to sign excel files. I understand that I need to export it as PFX. I believe I need Azure key vault to do so, correct? If I get Key vault, how do I transfer / add my trusted…
Key Vaults Secrets and RSA Keys
Hi, I am trying to store a RSA key in the ADF Key Vaults so it can be use with a Linked Service. However whenever I try to test SFTP connection it comes back with this error: …
Which IPs need to be allowed in event hub and key vault firewalls for it to work with change notifications
I am trying to setup change notifications for my application using Microsoft Graph and Event Hubs as described here. I set up Azure Event Hubs authentication using shared access signatures (SAS) through the Azure portal. However I am having challenges…
How to let synapse pipeline identify a value as hexadecimal encoded text
Hello, I want to sign a JWT token using the signing functionality of Azure Key Vault and have generated a private key. I want to send a request to the Key Vault from Azure Synapse pipeline's Web component. The configuration of this web component is as…
Configure Azure Key Vault & Create Credential in Power Automate
Hi Team, I have configured the Azure Key Vault in the Azure Portal. But when I am trying to create credentials in Power Automate, I am getting this error message "Could not verify your user permissions on the Azure key vault". Could you please…
How to fix error: SSL_ERROR_UNRECOGNIZED_NAME_ALERT while browsing a web app
Hello there, I get SSL_ERROR_UNRECOGNIZED_NAME_ALERT error when I browse a web app although it's cert and secret are valid. When the certificate and passphrase are directly uploaded to application gateway listener the web app redirects properly and it…
Unable to disable publicNetworkAccess through ARM template
Hello, I have created a keyvault using arm template and when I add in the properties section: "properties": { "sku": { "family": "A", …