Can both the private and public key be exported from an Azure Key Vault and reused in an app for signing and encryption?

Question

Can both the private and public key be exported from an Azure Key Vault and reused (imported) into a custom app to support data signing and encryption? ...I'm not refering to simple backup unless there is an API to restore the key pair into a standalone app with its own standalone key store (e.g. built with Windows secure storage).

Answer 1

@Michael Herman (Web 7.0)

Thank you for posting your query in Microsoft Q&A. Please confirm what scenario are you following ?

• Using a certificate for signing a custom package in visual studio? If yes then this could be achieved by following Sign packages with Azure Key Vault
• If exporting the private and public certificate (which has been imported by you in past) and use it in an application via 3rd party tool ? Yes, you could export both public and private key from Key Vault: And use it with in a 3rd party application store, yes you could do that.
• If creating a Key in Azure Key vault and then exporting it with private key ? No, it would only allow exporting public key regardless of imported or generated Key within KeyVault.

Please do let me know which of the above scenarios are you following?

Thanks.

Akshay Kaushik

Please "Accept the answer" (Yes/No), and share your feedback if the suggestion works as per your business need. This will help us and others in the community as well.