Automating the Certificates or Client Secrets rotation with Key Vaults?

Question

How can I perform the automated keyRotation for my Applications and Service Principals with the Azure Key Vault?

https://learn.microsoft.com/en-us/azure/key-vault/keys/how-to-configure-key-rotation#key-rotation-policy

Because in both Applications and Service Principals | manage Certificates & Secrets blade, I cannot find the settings or way to connect it with my Key Vault.

Any help would be greatly appreciated.

Answer 1

@EnterpriseArchitect

Thank you for posting your query on Microsoft Q&A, from above description I could understand that you are looking to rotate "certificate & secret" for Entra ID App Registration.

Please do correct me if this is not the case by responding in the comments section:

Currently we don't have an option to import or rotate certificate from Azure Key Vault for an Entra ID registered application, however we could a credential from Key Vault.

Using a Customer managed keys to encrypt data in your tenant using Azure Key Vault in another tenant. This could be done via a managed identity.

Once Setup, Now you could Navigate to your Keys in KeyVault and setup a rotation policy for the same:

Thanks,

Akshay Kaushik

Please do accept the answer and rate your experience if the above-mentioned suggestion works as per your business need