If I manually upload a certificate through Azure Portal, I get all the components: key, certificate, chain If I install the keyvaylt extension on the vm, only the key and the certificate itself are uploaded. What could be the reason?

Elisha George 151

The keyvault extension (version 2.0) for linux vm allows you to unload certificates from keyvault to vm (unload the certificate itself, the key and the chain of intermediate certificates).
However, in fact, this is not the case.

If I manually upload a certificate through Azure Portal, I get all the components: key, certificate, chain
If I install the keyvault extension on the linux vm (Ubuntu 18.04), only the key and the certificate itself are uploaded.

What is the reason for that?

Which is the best way?

Is there any document related to that?

Marilee Turscak-MSFT 36,931 Reputation points Microsoft Employee

2022-01-27T18:37:07.62+00:00

Was it a fresh install or did you have v 1.0 installed before? If you had 1.0 installed before, you need to delete that version and delete the certificate files or roll-over the certificate to get the PEM file with full-chain on the VM.https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/key-vault-linux

Share via

If I manually upload a certificate through Azure Portal, I get all the components: key, certificate, chain If I install the keyvaylt extension on the vm, only the key and the certificate itself are uploaded. What could be the reason?

Your answer