Cannot Import Certificate into Azure Key Vault

Question

I am trying to import a certificate into Azure Key Vault but getting the error "The parameter keyVaultCsmId has an invalid value."

Answer 1

Hello,

 

Thank you for posting in Q&A forum.

Check if your Key Vault is set to use "Azure role-based access control" under "Access configuration". It needs to be set to "Vault access policy" instead.

Currently, App Service Certificate supports only Key Vault access policies, not the RBAC model. Source: https://learn.microsoft.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2Cportal#store-certificate-in-azure-key-vault

 

Best regards，

Jill Zhou

 

---

 

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hello Carolyn Schroeder,

Thanks for your question.

It is possible your certificate in AKV was imported as pem and not as pcks12. Re-import the cert from a pfx file with the --password parameter.

az keyvault certificate import --password $password                                

See: https://learn.microsoft.com/en-us/cli/azure/keyvault/certificate?view=azure-cli-latest#az-keyvault-certificate-import

Also see similar issue here from stackoverflow for an alternative solution: https://stackoverflow.com/questions/65781652/error-the-parameter-keyvaultcsmid-has-an-invalid-value-while-adding-app-servic

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola