Elaboration needed on Azure Key Soverignty
Hello, we came across this key sovereignty notion on Azure page and would like more clarification on the statement "Key sovereignty means that a customer's organization has full and exclusive control over who can access keys and change key…
Issue with Deploying Azure SQL Server Managed Instances: “Your deployment failed”
Hello, I am encountering an issue while trying to deploy Azure SQL Server Managed Instances. The deployment process fails with the message “Your deployment failed.” I have attached a screenshot of the deployment details and included the error message…
When making access policy for public cloud service principal, to whom the access is actually given?
On the documentation here we are required to give access for "abfa0a7c-a6b6-4736-8310-5855508787cd for public Azure cloud environment" to KeyVault in order for App Services be able to access keyvault certificates. If we give access to this…
How to access Azure Key Vault from on prem ETL pipeline?
Hello, I have an on prem VM with Windows Server 2022 that is joined to a local on prem AD domain. I have a Key Vault in Azure with secrets. Human users are hybrid and can authenticate to both on prem and Azure AD with their main corporate identities. I…
Get Private Key for a certificate from Azure Key Vault
I need a public key as encryptionCertificate, to encrypt the resource data that returns to my ReactJs Client app. Later a private key to decrypt MS Graph Rich notifications includes the resource data, as per URL:…
Azure Keyvault: The operation is not allowed by RBAC.
Hi, I am the owner of the subscription, i have created the azure keyvault and when I am trying to add a new secret, I get the following error message. The operation is not allowed by RBAC. If role assignments were recently changed, please wait…
Unable to create secret on key vault
az keyvault secret set --vault-name "my key vault name" --name "my secret name" --value "the secret goes here" (Forbidden) {"objectName":"my secret name","message":"Secret 'my secret name'…
local password can store in azure keyvult?
we are managing admin credentials with cyberark, would like to manage local credential with keyvault, what is possibility. share the details
not able to change access configuration policy
CODE InsufficientPermissions MESSAGE RAW ERROR Caller is not allowed to change permission model. For more information on how to change the permissions model follow this link: https://go.microsoft.com/fwlink/?linkid=2155160. Details:…
Set-AzSqlInstanceTransparentDataEncryptionProtector Configuration Error
Error: Set-AzSqlInstanceTransparentDataEncryptionProtector: Long running operation failed with status 'Failed'. Additional Info:'The requested server key was not found.' The keyid that i used is already the one generated in the…
Azure Key Vault - Cannot get the access policies information by Azure PowerShell
Hi All, I’m working on enabling Azure Key Vault backup. I need to gather secrets, keys, certificates, and access policies, then save them to a storage account. However, I’ve encountered an issue where the Azure Key Vault cannot retrieve the access…
Cannot Import Certificate into Azure Key Vault
I am trying to import a certificate into Azure Key Vault but getting the error "The parameter keyVaultCsmId has an invalid value."
How to correctly create a key in KeyValut with custom policy?
I want to use the Azure Portal to create a key in KeyValut for release to test the feature Secure Key Release feature with AKV and Azure Confidential Computing (ACC). First, I think I have to set up a correct KeyValut access policy for my SNP-CVM. As…
How to fetch certificate from azure key vault using Ansible
Hello,Currently we are storing certificate in azure key vault.and manually binding certificate to iis service.but need a way to automate fetch certificate from azure key vault using Ansible and then automate binding.
Azure Key Vault -
Hello, i am very new to AKV. We have Dev, UAT and Prod SQL environments (on prem) and every quarter we refresh the data in Dev and UAT from Prod by restoring the production database to these downstream environments. If we enable TDE and use AKV to…
Unable to delete the Azure KeyVault Purge Protection
Hi Team, I have created a Key Vault HSM with Purge Protection enabled, but I am unable to delete the Purge Protection. I am encountering the following error: Failed to purge managed HSM "aeshsmpoc" of subscription "Payperuse" with…
Troubleshooting "The specified X.509 certificate content is invalid" Error When Importing to Azure Key Vault
I encountered the error "The specified X.509 certificate content is invalid. Error: One or more X.509 properties are invalid." while attempting to import a certificate from Cybersource into Azure Key Vault. The command used was: az keyvault…
Azure Key Vault RBAC permissions required for APIM to retreive a cert?
Hi I have a Azure API manager setup and want to add a custom domain. We have deployed Azure Key Vault and uploaded a certificate. We have deployed Key Vault with the recommended "role-based access control" We have given the APIM managed…
How to fix (ResourceGroupNotFound) learn- issue
When running az keyvault set-policy -n <keyvault-name> --key-permissions get --spn <clientId>, I get the error: (ResourceGroupNotFound) Resource group 'learn-863f910a-xxxx-xxxx-xxxx-4c6f3e30d049' could not be found. Code:…
Azure CLI prompts "Failed to connect to MSI" when creating keys in KeyVault
I want to create an exportable key in AKV with the attached SKR policy as described here (here ): az keyvault key create --exportable true --vault-name "vault name from step 1" --kty RSA-HSM --name "keyname" --policy…