Windows CA integration with KeyVault

Question

Hello everyone,

I'm trying to find out if KeyVault can communicate with a windows Certificate Authority because my aim is to make a CSR from keyvault to CA like this:

https://learn.microsoft.com/en-us/azure/key-vault/certificates/create-certificate

but it seems that it's possible only for Partnered CA Providers (Digicert, GlobalSign), is this correct?

thanks

Answer 1

Hi @Andrea

Thank you for reaching Microsoft Q&A Forum!

Yes, your understanding is correct. A Key Vault certificate object holds a configuration that's used to communicate with a selected certificate issuer provider (Digicert, GlobalSign) to order X.509 certificates.

However, you can create a certificate with a CA not partnered with Key Vault.
You can use this method with any Certificate Authority (CA), not just the ones that are partnered with Key Vault. This means your organization has option to choose whichever CA it prefers.
For more information, please go through https://learn.microsoft.com/en-us/azure/key-vault/certificates/certificate-scenarios#creating-a-certificate-with-a-ca-not-partnered-with-key-vault

Hope this helps. Do let us know if you any further queries by responding in the comments section.

Thanks,

Akhilesh.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Answer 2

Thanks for posting your question in the Microsoft Q&A forum.

You can generate a CSR in Key Vault, manually submit it to your Windows CA, and then merge the signed certificate back into Key Vault.

You could develop a custom solution that automates the process of generating a CSR in Key Vault, submitting it to your Windows CA, and importing the signed certificate back into Key Vault.

Some third-party certificate management solutions offer integrations between Azure Key Vault and on-premises CAs, including Windows CA.

---

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful