Automatic Export Secret and Import Certificate from KeyVault

Philipp Gerber 251

Hello Community,

a short Question about a automatic import/export from Azure Certificates.

Situation:

I use Azure Certificates to build an Wildcard Certificate.

This Certificate will be automatically stored in a KeyVault.

Ok, all fine to this moment.

Now i must go to the KeyVault -> Secrets and export the current Version as a Certificate.
After this i go to Certificates and import the downloaded Certificate from the Step before to the KeyVault.

After this step i can use this Certificate from diffrent locations.

The Question:

Can i do this Steps automatically?
Its really stressful to do this steps all year again.

Thanks a lot.

Regards,

Phil

Tushar Kumar 3,226 Reputation points MVP

2023-05-17T07:40:23.5566667+00:00

Yes, you can automate the steps you mentioned using an Azure Automation account. Azure Automation allows you to create runbooks and schedules to automate various tasks, including working with Key Vault.

Here's an outline of the automation steps you can follow:

-Create an Automation account:

-Create an Automation runbook:

-Within the Automation account, create a new runbook. This runbook will contain the automation script that performs the desired tasks.

Define the automation script:

-Write a PowerShell script inside the runbook to automate the following steps:

-Export the certificate to a file.

-Import the exported certificate file back into the Key Vault as a certificate.

-Perform any additional necessary tasks, such as configuring permissions or updating applications to use the new certificate.

Schedule the runbook:

Create a schedule in the Automation account to trigger the execution of the runbook at the desired frequency. For example, you can schedule it to run daily or on specific days and times.

Let me know if you need help with Powershell steps of doing this, If this was helpful please click Accept as Answer. :)
Philipp Gerber 251 Reputation points

2023-05-17T12:18:42.72+00:00

Thanks for your Answer.

The Export to a file. Must i use for this an Storage account or can i store this in a temporary file?
Tushar Kumar 3,226 Reputation points MVP

2023-05-17T12:40:31.0333333+00:00

If you need to create temporary files as part of your runbook logic, you can use the Temp folder (that is, $env:TEMP) in the Azure sandbox for runbooks running in Azure. The only limitation is you can't use more than 1 GB of disk space.

https://learn.microsoft.com/en-us/azure/automation/automation-runbook-execution

1 answer

Limitless Technology 43,966 Reputation points

2023-05-18T15:22:49.27+00:00

Hello there,

You can try powershell script and task scheduler to achieve this.

The Task Scheduler enables you to automatically perform routine tasks on a chosen computer. The Task Scheduler does so by monitoring whatever criteria you choose (referred to as triggers) and then executing the tasks when those criteria are met.

https://learn.microsoft.com/en-us/windows/win32/taskschd/task-scheduler-start-page

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--
Please sign in to rate this answer.

0 comments No comments
Sign in to comment