configuration

Question

Hello,
I created a certificate with parametr exeportable privat key ='no'.
Is there any way how to be able to see or export or print Advanced Policy Configuration by each certificate created in key vaults ??

Thank you very much?

Pavel

Answer 1

@Synek Pavel (SGEF) ,

From your query , I understand that you are looking for a way to print or export the Advanced Policy Configuration for a certificate . You can use azure PowerShell for the same apart form the portal. Please find the details.

I created a certificate within my azure subscription called zapcert as shown below :-

You can use the Get-AzKeyVaultCertificatePolicy powershell module from the Az module to get details on the certificate policy for any certificate. You must have Azure AZ PowerShell Module installed. Please see the linked article on how to install and use the same. You also need to make sure that you have Key vault reader/Key vault administrator permission at the Keyvault resource level .

PS C:\> Connect-AzAccount  
WARNING: TenantId 'xxxxxxxxxxxxxxx' contains more than one active subscription. First one will be selected for further use. To select another subscription, use Set-AzContext.  
  
Account                          SubscriptionName         TenantId                             Environment  
-------                          ----------------         --------                             -----------  
admin@xxxxxx.onmicrosoft.com Visual Studio Enterprise xxxxxxxx AzureCloud   
         
PS C:\> Get-AzKeyVaultCertificatePolicy -VaultName "msdkv01" -Name "zapcert"  
      
SecretContentType               : application/x-pkcs12  
Kty                             : RSA  
KeySize                         : 4096  
Curve                           :   
Exportable                      : False  
ReuseKeyOnRenewal               : False  
SubjectName                     : CN=zapcert.com  
DnsNames                        : {zapcert.com}  
KeyUsage                        : {cRLSign, digitalSignature, keyAgreement, keyEncipherment}  
Ekus                            : {1.3.6.1.5.5.7.3.1, 1.3.6.1.5.5.7.3.2}  
ValidityInMonths                : 12  
IssuerName                      : Self  
CertificateType                 :   
RenewAtNumberOfDaysBeforeExpiry :   
RenewAtPercentageLifetime       : 80  
EmailAtNumberOfDaysBeforeExpiry :   
EmailAtPercentageLifetime       :   
CertificateTransparency         :   
Enabled                         : True  
Created                         : 3/29/2022 2:38:44 PM  
Updated                         : 3/29/2022 2:38:44 PM  
  
  
  
  
PS C:\> $cert01=(Get-AzKeyVaultCertificatePolicy -VaultName "mdkv01" -Name "zapcert" )  
  
  
PS C:\> $cert01[0].Created  
  
Tuesday, March 29, 2022 2:38:44 PM  
  
PS C:\> $cert01[0].Exportable  
False  
  
PS C:\> $cert01[0].DnsNames  
zapcert.com  
  
PS C:\> $cert01[0].KeyUsage  
cRLSign  
digitalSignature  
keyAgreement  
keyEncipherment  
  
PS C:\> $cert01[0].CertificateTransparency  

Thus you can see all the details of the certificate using PowerShell . Hope this helps you with the information that you are looking for . In case you require any further information , please feel free to ask in comments and we will help you further on this. If the information is helpful , please do accept the post as answer which will help other members of the community .

Thank you .

---

• Please don't forget to click on whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
• Want a reminder to come back and check responses? Here is how to subscribe to a notification
• If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators