VaultCertificate interface
Describes a single certificate reference in a Key Vault, and where the certificate should reside on the VM.
Properties
| certificate |
For Windows VMs, specifies the certificate store on the Virtual Machine to which the certificate should be added. The specified certificate store is implicitly in the LocalMachine account. For Linux VMs, the certificate file is placed under the /var/lib/waagent directory, with the file name <UppercaseThumbprint>.crt for the X509 certificate file and <UppercaseThumbprint>.prv for private key. Both of these files are .pem formatted. |
| certificate |
This is the URL of a certificate that has been uploaded to Key Vault as a
secret. For adding a secret to the Key Vault, see Add a key or secret to the
key
vault.
In this case, your certificate needs to be It is the Base64 encoding of the
following JSON Object which is encoded in UTF-8: |
Property Details
certificateStore
For Windows VMs, specifies the certificate store on the Virtual Machine to which the certificate should be added. The specified certificate store is implicitly in the LocalMachine account. For Linux VMs, the certificate file is placed under the /var/lib/waagent directory, with the file name <UppercaseThumbprint>.crt for the X509 certificate file and <UppercaseThumbprint>.prv for private key. Both of these files are .pem formatted.
certificateStore?: stringProperty Value
string
certificateUrl
This is the URL of a certificate that has been uploaded to Key Vault as a
secret. For adding a secret to the Key Vault, see Add a key or secret to the
key
vault.
In this case, your certificate needs to be It is the Base64 encoding of the
following JSON Object which is encoded in UTF-8:
{
"data":"",
"dataType":"pfx",
"password":""
}
To install certificates on a virtual
machine it is recommended to use the Azure Key Vault virtual machine extension
for
Linux
or the Azure Key Vault virtual machine extension for
Windows.
certificateUrl?: stringProperty Value
string