Let's Encrypt support for Azure Key Vault

Jonathon Aroutsidis 16

Add Let's Encrypt as a Primary CA provider with Azure Key Vault or provide a much better service for "3rd Party" CA's to enable certificate requests and fully automated renewals.

Eric Hangsu 1 Reputation point

2021-11-05T00:26:15.11+00:00

Bitlocker did this 3rd party correction strategy for certification so have a look on git for their install?
Jonathon Aroutsidis 16 Reputation points

2021-11-05T00:32:50.743+00:00

Do you have a link to the repo?

I would much rather Microsoft add native support as I'm sure most users would. This should be the primary focus but secondary an easy short term solution.
Eric Hangsu 1 Reputation point

2021-11-05T00:45:32.573+00:00

BitLocker-Guidance+

they'll probably want to start at certificate 2601, so you can confirm the least up to date measure and following the 3 certifications from that version would enable the sysadmins to request the new validation.

--
if i didn't help, maybe throw the computer off Olympus mountain*s. ^^
Eric Hangsu 1 Reputation point

2021-11-05T00:46:21.647+00:00

take off the plus in the link, he posted it wrong
Jonathon Aroutsidis 16 Reputation points

2021-11-05T00:54:56.38+00:00

This repo seems to be for Windows BitLocker (unless I'm missing something) but I'm asking specifically about Azure Key Vault.

1 answer

JamesTran-MSFT 36,361 Reputation points Microsoft Employee

2021-11-05T21:38:41.87+00:00

@Jonathon Aroutsidis
Thank you for your product feedback!

When it comes to using Let's Encrypt, I found some documentation which walks through how to integrate Let's Encrypt with the Azure Key Vault. When it comes to your product feedback, I've passed this along to our Key Vault team and would highly suggest leveraging our new User Voice forum to share this feature request, so our engineering team can take a look at implementing this.

Azure Key Vault Let's Encrypt
Azure Key Vault Certificates with Let's Encrypt as the Issuer CA - 3rd Party Link

If you have any other questions, please let me know.
Thank you for your time and patience throughout this issue.

----------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
Please sign in to rate this answer.

1 person found this answer helpful.
Jonathon Aroutsidis 16 Reputation points

2021-11-08T02:18:09.017+00:00

Hi @JamesTran-MSFT

I'm currently using Azure Pipelines to automate LE certificate generation/renewal but I've read the second link before and there isn't too much difference in what I'm currently doing. I was hoping for a much better way such as Azure Key Vault running the automation to create/renew the certificate as an interim until LE can be made a first party CA.

Thanks for sharing the new user voice forum, I'll pop over there and raise this in that forum.

Sven Aelterman 11 Reputation points Microsoft Employee

2023-07-12T15:45:56.2533333+00:00

Just a note that the linked GitHub repo is a fork that is now very far behind the original repo. This is the original repo: https://github.com/shibayan/keyvault-acmebot
Sign in to comment