Share via

Issues Connecting to Azure Key Vault Data Plane on Mac with Azure VPN Client

Shon Pazarker 0 Reputation points Microsoft Employee
2024-07-17T13:03:49.3133333+00:00

Hello everyone,

I am experiencing an issue with accessing my Azure Key Vault on my Mac. The error message I receive is:

The connection to data plane failed. Please refresh and try again. If Private Links are enabled on the vault and the issue persists please follow the steps in the following link https://go.microsoft.com/fwlink/?linkid=2156688.

Context:

Environment: I am using both Windows and Mac machines. Setup: Windows: Everything works as expected. I can connect to the Azure Key Vault without any issues. Mac: I encounter the above error message. Network: I am connecting through the Azure VPN client on both machines. Private Endpoint: The Key Vault is configured with a private endpoint. DNS Configuration: I have added the required DNS entries in my /etc/hosts file on my Mac and prioritized IPv4 DNS servers.

Steps I’ve Taken So Far:

Configured /etc/hosts: Added an entry for the Key Vault private endpoint. Flushed DNS Cache: Ran sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder. Tested DNS Resolution: Used nslookup and dig to verify DNS resolution, which shows the public IP address instead of the private IP. Disabled IPv6: Temporarily disabled IPv6 to force the use of IPv4.

Observations:

On my Mac, nslookup and dig still resolve the Key Vault hostname to its public IP address, not the private IP address as configured in /etc/hosts. Everything works perfectly on Windows using the same Azure VPN client configuration.

Request for Help:

Has anyone encountered similar issues with the Azure VPN client on macOS? Are there additional steps or configurations required on macOS to ensure the private endpoint is used correctly? Could there be any specific settings in the Azure VPN client for macOS that I might be missing?

I have followed the guidance in the linked documentation but have not had any success in resolving this issue. Any insights or suggestions would be greatly appreciated!

Thank you in advance for your help

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,222 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,344 questions
Azure Private Link
Azure Private Link
An Azure service that provides private connectivity from a virtual network to Azure platform as a service, customer-owned, or Microsoft partner services.
502 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Shon Pazarker 0 Reputation points Microsoft Employee
    2024-07-19T10:17:29.95+00:00

    Hi!

    Nothing helped with the resources you provided

    but I managed to fix the issue those are the steps I did:

    after login to azure vpn client I ran this command in the terminal:

    sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder

    Then refresh the azure key vault and the error didn’t appear anymore and i could access the certificates/secrets/keys

    0 comments
  2. Akhilesh 7,635 Reputation points Microsoft Vendor
    2024-07-22T05:39:11.9+00:00

    Hi @Shon Pazarker

    I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

    Issue: > Issues Connecting to Azure Key Vault Data Plane on Mac with Azure VPN Client

    Solution:

    Issue is fixed after login to azure vpn client I ran this command in the terminal: sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder Then refresh the azure key vault which fix your issue.

    If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.