This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi Community,
I have a Azure SQL DB with always encrypted feature enabled using Azure Key Vault Key.
I want to consume this from a Power BI report. So I'm using a Data Gateway in the middle, with ODBC connection and a Service principal (Client/Secret) who is able to access the Key (from Azure Key Vault). Everything is working fine but for security constraints I need to change this Service principal Authentication to Certificate.
I want to know if it is possible to change this authentication (that allows ODBC connection to get the Azure Key vault and Decrypt data) to Azure service principal with a certificate (and not a client secret).
Thank you in advance for your help.
Gabriel Jesus Villayzan Chancafe Thank you for reaching out.
My understanding is that you are trying to change the current Key Store Authentication from Client Secret to Client Certificate. Please let me check from y end if ODBC connection can pull certificate instead of a secret.
Regards,
Oury
Using a certificate instead of secrets is not supported.
Why are you looking to use certificate instead?
Regards,
Oury
I have updated my comment above.
Using a certificate instead of a secret is not supported after checking internally.
The driver supports authenticating to Azure Key Vault using the following credential types:
More information can be found on https://learn.microsoft.com/en-us/sql/connect/odbc/using-always-encrypted-with-the-odbc-driver?view=sql-server-ver16#using-the-azure-key-vault-provider.
Regards,
Oury
@Gabriel Jesus Villayzan Chancafe
Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
I wanted to check in and see if you had any other questions or if you were able to resolve this issue?
If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.