Problem: Azure Backup with Disk Encryption and Key Vault Permissions (RBAC)
I’m trying to back up a virtual machine with disk encryption (both OS and data disks) using Recovery Services Vault in Azure. The key used for disk encryption is stored in Azure Key Vault, and I'm using RBAC (Role-Based Access Control) for access…
How to resolve imported certificate is a self signed certificate error in AFD even though it is a certificate issued by a private CA?
First I created CA in key vault (issuer is OnecertV2-PrivateCA) then generated certificate with the domain name but when I try to add this certificate in AFD it gives the following error: 'cannot add secret as self signed certificate is not allowed in…
What is the least privileged configuration to allow individuals to create user managed identities and assign non privileged roles ? And using terraform to do the same.
Our setup & issue We're using terraform to manage infrastructure. When trying to create a Azure Key Vault with enable_rbac_authorization set to true, terraform silently succeeds however the permission model is set to Vault Access Policy . On…
Unable to sign msix package using Azure Key Vault in Visual Studio 2022
I have followed this article: https://zcusa.951200.xyz/en-us/windows/msix/desktop/sign-with-akv-cert but I am unable to publish the signed package. I was able to successfully specify the Azure Key Vault Uri and the certificate for signing, however, I…
How can I revert back to the previous version of a certificate when renewing or uploading a new cert in application gateway if the new cert is not working or uploaded by accident
I would like to know if there is a way to use the previous version of a certificate that has been uploaded to the keyvault. Once the certificate has been uploaded to the keyvault and renewing the certificate in the Application Gateway Listener, if the…
How to convert existing API Management named values from Secret type to Key Vault reference
I have received Azure Advisor recommendations regarding API Management security enhancement, specifically stating that 'API Management secret named values should be stored in Azure Key Vault.' In our organization, we have multiple API Management…
Keyvault Failover across regions with private endpoint
Hello, I've read this doc https://zcusa.951200.xyz/en-us/azure/key-vault/general/disaster-recovery-guidance#failover-across-regions and with reference to the bullet point in that doc, quote "If you're using private link to connect to your key…
How to enable the replication for the Azure Key Vault?
So here we have two key vault (East US, West US). So I want to enable the replication to the key vaults so that If I do any changes in the Keys, Secrets or Certificates it should replicate to the paired region. As per doc, its automatic but do we need…
Where to store secret token retrieved during runtime?
Hi Team, I'm trying to visualize and best way to implement a very common enterprise use case. I'm using ADF, Key Vault, Azure SQL data base as inventories. Requirement is to fetch some data from an exposed API. Before calling the API I need to generate…
including Azure Key Vault in .NET core 8 app running on on prem IIS
My .NET core 8 app talks to Azure Key Vault when I run it in Visual Studio 2022 because I can see a reference to Azure Key Vault in the Connected Services under the project. The app does not start on the IIS server, because of an authorization fail in…
How to connect azure Keyvault(Public Access Disabled) To Power automate cloud
Team, Please guide on how i can connect azure key vault(Public access disabled ) to Power automate flow in cloud. What i have done already> 1.Registered an application in Azure AD and assigned necessary persmissions on the keyvault. With public access…
Now able to add Certificates from AKV in APIM
Hi Team, IM trying to add the certificates from AKV to APIM, But im getting authorization issue . Here are the roles assigned in AKV for APIM . Here it mentions that my user account(client) doesn't have permission. Please let me know hat permission…
How to monitor data lake sas token expired?
Hi there, I have store sas token value in key vault, but I can't know when token expires. So I will find this issue after the token expires. Is there any way to monitor when the token expires? Thanks zmsoft
Restricting Azure Key Vault Access to a Specific Network Range or Subnet Using Private Endpoint
Hi, I have a scenario where I have an Azure Key Vault configured with a private endpoint connected to the organizational network through an Azure VNet. Currently, the Key Vault is accessible from the entire organizational network. I want to restrict…
Insufficient access for "Create a Key Vault and store secrets"
sandbox setup appears to not properly provision account RBAC. https://zcusa.951200.xyz/en-us/training/modules/manage-secrets-with-azure-key-vault/3-creating-vaults-storing-secrets?tryIt=true&source=learn }
Unable to get secrets in data factory
I was trying to connect ADF with secret for WEB API GET operation I have granted the secret access to AD: Connection to linked service was successful but connection to secret failed Linked service (successful) Secret (failed)
How to access the secret of a private Azure Keyvault, if you're using a SHIR in linked service?
Hello, I have a keyvault that's public access disabled. It has secrets that needs to be taken. In the ADF, i have created a linked service for this keyvault so that it can be used to extract the secrets(credentials) inside other linked services. I have…
Cancelled subscription on KeyVault but still getting charged!
We are currently testing Azure as a potential technology stack for our IoT platform. We have extended our test period and switch to Pay as You go, after the first 30 days of free trial. We have been testing KeyVault but put it to a hold directly when we…
Can a Databricks workspace use an access connector to retrieve secrets from Key Vault?
faced error when trying to access secrets by adding the access connector object ID as key Vault Administrator on Key Vault.
How to interact with Azure key vault to sign the ClickOnce manifest ?
Dear Team, We have EV Code signing Certificate and it's an stored at Azure key vault and we are able to sign in .exe file(using AzureSignTool) but not with the manifest so kindly assist that how can we achieve it . Earlier we have used Mage command…