What is use of expiry time and rotation time in rotation policy ?

Question

Azure Key vault has following three parameters that needs to be set for rotation of key:

1. Expiry Time
2. Rotation Time
3. Notify time
   what is significance of each? After reading answer under https://learn.microsoft.com/en-us/answers/questions/1183058/key-vaults-secrets-key-expiration and https://learn.microsoft.com/en-us/azure/key-vault/keys/how-to-configure-key-rotation I am confused between expiry date and rotation policy. Please clarify the same.

Answer 1

Thanks for posting your question in the Microsoft Q&A forum.

You can configure the key with an expiry more than Rotation Time:. This means a new version of the key will be generated, but the old key can still be used until its expiry time.

And if for example, You set a notify time of 30 days. This means you will receive notifications 30 days before the key is scheduled to expire or rotate.

** Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful **