Hello Green, Jim
Thanks for sharing the requested details and your patience on this.
This issue is due to wrong configuration in the Azure Key Vault extension. Please refer this document: https://zcusa.951200.xyz/en-us/azure/virtual-machines/extensions/key-vault-windows?tabs=version3#property-values
1.msiClientId under "authenticationSettings" shall be the "Client ID" (but not resource Id) of the UMI.
2.certificateStoreName shall be defined in the observedCertificates.
Please check the above details and also make sure the UMI has enough permission to access the key vault.
Hope this helps.
If the suggested response helped you resolve your issue, please 'Accept as answer', so that it can help others in the community looking for help on similar topics.