Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
709 questions
@Sukant Virkud
Thank you for your post and I apologize for the delayed response!
I found a few internal support requests where other customers ran into the same issue. I'll share the solution below to hopefully help point you in the right direction.
Error Message: Property x5c has invalid value X5C must has at least one valid item
Root cause:
Depending on your Certificate's Header and Footer you might see something similar to the below.
-----BEGIN PKCS7-----
Certificate Info
-----END PKCS7-----
According to our engineering team, Certificates with a Header/Footer similar to this worked previously because the portal removed the header and footer from the certificate, and only sent the certificate body in the request to the AKV backend. However, due to a recent change the Azure Portal was updated to support merging the certificate with its chain, which requires sending everything from the certificate, including the header and footer.
Solution:
Due to this change, you'll have to now use the Begin/End Certificate Header/Footer in order to merge your certificate. For more info.
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
If you have any other questions or are still having issues with this, please let me know.
Thank you for your time and patience throughout this issue.
----------
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
i could not able to resolve it with given instructions. i generated a server certificate from "Name.com" when i try to merge then i don't able to do it.
LEricKeown-8587 answered • 1 sec ago
@JamesTran-MSFT my certificate has the -----BEGIN CERTIFICATE----- header and -----END CERTIFICATE----- footer and I am still seeing the below error.
Error information
CODE
BadParameter
MESSAGE
Something went wrong with the certificate creation.
RAW ERROR
Property x5c has invalid value X5C must have at least one valid item
Some additional details, I created the CSR in the Key Vault with a "Certificate issued by a non-integrated CA" and content type of PEM.
I have tried to import the cert as a pem file into the key vault and received the same message.
So can you please go back to the engineering team and see if they have any updates or work arounds to get the certificate loaded in the KeyVault.
Hello, I would like to know if someone managed to resolve this error, I asked the certifier to issue the certificate again, believing that the error is in the Key, but I am still having the same error.
Sign in to comment