- Overview
- Reference Guide
- Setup & Architecture
- Release Notes
- Workflow
- API Reference
- Integration Guide
- Discovery Agent Setup Guide
Key Management
The Key Management section provides tools to manage cryptographic keys and certificates stored in external key vaults. It enables seamless integration with supported vault providers to upload, track, and manage certificate lifecycles within those vaults.
Azure Key Vault
Only users with the "Manage Azure Key Vaults" permission can configure an Azure Key Vault, but any user with the "Submit CSR" or "Generate Certificate with Private Key" permission can upload certificates to the vault. In CertSecure Manager, a user can configure Azure Key Vault integration by entering Azure AD credentials. These credentials, assigned the RBAC role Key Vault Certificates Officer, enable the application to upload certificates to the vault on behalf of users. The user can also update or delete existing configurations from this page as needed.
To add a new Azure Key Vault, click on Configure. Click on Create New on the new page.
| Field | Required | Description |
|---|---|---|
| Vault Name | Yes | The name of the Azure Key Vault as it appears in your Azure environment |
| Client ID | Yes | The Application (Client) ID of the Azure Active Directory app registration used to authenticate with the vault |
| Tenant ID | Yes | The Directory (Tenant) ID of the Azure Active Directory tenant where the app registration resides |
| Client Secret | Yes | The client secret generated for the Azure AD app registration, used for authentication |
| Departments | Yes | Select one or more departments that will have access to this vault. At least one department must be selected. |
| Environment | Yes | Select the Azure environment type. Options are Commercial or Government |
To upload a certificate directly to a configured Azure Key Vault:
-
Navigate to Enrollment > Generate Certificate.
-
After filling in the necessary details, click the Generate Certificate button. If Azure Key Vault has been integrated, a pop-up window will appear.
-
In the pop-up, choose the Azure Key Vault, specify a name (which serves as the unique identifier for the certificate within the Key Vault), and select the desired format.
-
Click Yes to proceed. Once the certificate is issued, it will be automatically uploaded to the selected Key Vault.
-
A log entry will be created under Misc > Logging > Certificate Logs > Certificate Management, indicating success or failure of the upload.
