Can both the private and public key be exported from an Azure Key Vault and reused in an app for signing and encryption?

Michael Herman (Web 7.0) 0 Reputation points
2023-03-11T00:54:21.5233333+00:00

Can both the private and public key be exported from an Azure Key Vault and reused (imported) into a custom app to support data signing and encryption? ...I'm not refering to simple backup unless there is an API to restore the key pair into a standalone app with its own standalone key store (e.g. built with Windows secure storage).

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
709 questions
Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
2,880 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Akshay-MSFT 3,956 Reputation points Microsoft Employee
    2023-03-21T08:32:31.4733333+00:00

    @Michael Herman (Web 7.0)

    Thank you for posting your query in Microsoft Q&A. Please confirm what scenario are you following ?

    • Using a certificate for signing a custom package in visual studio? If yes then this could be achieved by following Sign packages with Azure Key Vault
    • If exporting the private and public certificate (which has been imported by you in past) and use it in an application via 3rd party tool ? Yes, you could export both public and private key from Key Vault: And use it with in a 3rd party application store, yes you could do that. User's image
    • If creating a Key in Azure Key vault and then exporting it with private key ? No, it would only allow exporting public key regardless of imported or generated Key within KeyVault. User's image

    Please do let me know which of the above scenarios are you following?

    Thanks.

    Akshay Kaushik

    Please "Accept the answer" (Yes/No), and share your feedback if the suggestion works as per your business need. This will help us and others in the community as well.