Unable to create Key Vault even when I have all the permission
I have top most access but unable to create key vault and getting following error: {"code":"AuthorizationFailed","message":"The client '@acplcargo.com' with object id 'dbe0334c-93dc-4e08-ada5-616af0a216c8' does not have…
Azure Key Vault
Purge Managed HSM with Purge Protection to Stop Unnecessary Billing
I need to purge a Managed HSM with Purge Protection enabled because it’s incurring $124 daily charges and contains nothing important; it was created for testing.
Azure Key Vault
Verifying usage and detecting unused Key Vault
How can I query all the Azure Key Vaults in my Azure subscriptions to check if they are really in use or not ? Because I have 1000+ Key Vaults and some of them must be converted to RBAC from the default policy mode, but not sure what the side effects…
Azure Key Vault

When 'enabledfordiskencryption' is True, networkAcLs.bypass must include "Azure Services".
I am trying to create a key vault and selected only the option Azure Disk encryption for volume encryption under Access policy. For networking it was left to default i.e. all networks. But the deployment is failing for key vault. I have attached the…
Azure Key Vault
Help storing a HSM protected code signing certificate in Azure Key Vault
If you use a code signing certificate then you are likely aware of the more recent stringent requirement for private key storage. I was looking at how to store this in Azure Key Vault. To achieve this, I needed to upgrade to Azure Key Vault Premium…
Azure Key Vault


Getting errors when managing keys in public access restricted keyvault via terraform
Hi , I have 5 Azure subscriptions and each subscription contains 4 regions, so for each of them I have total 20 keyvaults which I am creating and managing via terraform. I am creating keyvaults, keys in it and assigning permissions and then using these…
Azure Key Vault
Unable to sign a digest with key in Managed HSM
Using the azure cli, I'm trying to sign a digest with a key stored in a Managed HSM; in bash: signature=$(az keyvault key sign --hsm-name "myHsmName" --name "my_hsm_keyname" --algorithm RS256 --digest…
Azure Key Vault
how to add code signing certifcate into azure HSM ?
get have acode signing .pem file 4096 long, how do we add it to azure HSM
Azure Key Vault

Creating Secrets / Keys in Azure Key Vault - ClickOps Vs DevOps
Hi I wanted to understand from security and compliance standpoint, what is the best practice to create secrets in the Azure Key Vault. Should it be done using DevOps Pipelines or manually through ClickOps? Doing it through DevOps means we need to store…
Azure Key Vault
Migrating the Azure Key Vault to use Role Based Access Control in bulk
I have several (395+) Azure KeyVaults that are still using the default Access Policies (i.e., RBAC is disabled). Would it be possible to use a PowerShell script to bulk migrate them all in one go to make it secure as a manual task to convert them is…
Azure Key Vault

Error when Importing Certificate
Hello, Hope you guys are doing great, I'm currently trying to update a certificate in our keyvaults, I have the certificate in PFX format and it's password protected. Although the keyvault it's stating that an error occurred while importing the…
Azure Key Vault
Config-server with Azure Key Vault Cloud config
Hi guys I really need some insight here. I have an actual setup of config-server + centralized git configuration repo + App client (running on an k8 cluster) App connects to config-server, that connects to the git repo, fetch the configuration and…
Azure Key Vault
Azure Portal having Authentication Issues
Error Message: The portal is having issues getting an authentication token. The experience rendered may be degraded. Additional information from the call to get a token: Extension: Microsoft_Azure_Monitoring Resource: loganalyticsapi Details: The…
Azure Key Vault

Azure KeyValut Secret Expired Event Not Getting Fired
Hi, I have a secret stored in azure key vault with an expired date , I want to be notified when the secret near be expired (30 days after the expiration date). To do that, i used Azure Event Grid to listen the key vault secret event with…
Azure Key Vault
Azure Monitor
Azure Event Grid
data factory managed identity is not being identified as a trusted service by keyvault
We have an issue with an ADF pipeline, when attempting to reach a secret from a KV in the same RG, the connection fails with the following error: "Client address is not authorized, and caller is not a trusted service" The setup is made…
Azure Key Vault
Azure Data Factory
How to fix the VM's issue during the boot. failing with the key vault secret saying does not exists
After the Crowdstrike impact downtime, the VM is not booting up. During the booting process the VM is throwing up with an error message "The resource operation completed with terminal provisioning state failed., "keyVaultSecretDOestNotExist, …
Azure Key Vault
Azure Virtual Machines
Keyvault Renew an integrated CA certificate failure
Is it possible to resubmit a certificate auto renewal if it failed to DigiCert?
Azure Key Vault
Error in Key Vault configuration for Azure App Service certificate
An error occurred when storing in Key Vault in Step 1: Store of the App Service certificate configuration in the Azure portal. The following is a part of the activity log when the error occurred. ... "status": { "value":…
Azure Key Vault
Key Vault error the operation is not allowed by RBAC.
Key Vault error the operation is not allowed by RBAC.
Azure Key Vault

Crashing when accessing Key Vault from C++ application
I am following this guide to connect to my Key Vault from my C++ app: https://azuresdkdocs.blob.core.windows.net/$web/cpp/azure-security-keyvault-keys/4.1.0/index.html I am writing in C++ for Unreal. I am getting a consistent crash when trying to do…