Excuse me, where is the SDK for downloading CSR

Hello @祎李 , Thank you for posting your query on Microsoft Q&A. As the private key of a key vault is stored in the HSM and cannot be obtained. This is one of the key security features of Azure Key Vault. The HSM ensures that the private key is never exposed outside of the HSM boundary, which provides a high level of security for your keys. Therefore, you cannot use OpenSSL to access the private key of a key vault. Please refer the below document to Generate and transfer your key to the Managed HSM. https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/hsm-protected-keys-byok I hope this information is helpful. Please feel free to reach out if you have any further questions. Thanks, Raja Pothuraju.

key vault Download CSR

祎李 20

Excuse me, where is the SDK for downloading CSR

KM Aliullah 0 Reputation points

2024-07-01T10:53:45.3366667+00:00
Install OpenSSL:

On Windows: Download from Shining Light Productions.

On Linux: sudo apt-get install openssl

On macOS: brew install openssl

Generate a Private Key: openssl genpkey -algorithm RSA -out private.key

Generate the CSR: openssl req -new -key private.key -out request.csr You will be prompted to enter details like Country, State, Locality, Organization, etc. More Details >>visit website
祎李 20 Reputation points

2024-07-02T02:25:23.66+00:00
Thank you for your answer:

However, the private key of key vault is in the HSM ,the private key cannot be obtained, cannot use openssl.

Looking forward to your reply

1 answer

Raja Pothuraju 8,095 Reputation points Microsoft Vendor

2024-07-04T19:21:17.8066667+00:00

Hello @祎李,

Thank you for posting your query on Microsoft Q&A.

As the private key of a key vault is stored in the HSM and cannot be obtained. This is one of the key security features of Azure Key Vault. The HSM ensures that the private key is never exposed outside of the HSM boundary, which provides a high level of security for your keys. Therefore, you cannot use OpenSSL to access the private key of a key vault.
Please refer the below document to Generate and transfer your key to the Managed HSM.

https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/hsm-protected-keys-byok

I hope this information is helpful. Please feel free to reach out if you have any further questions.

Thanks,
Raja Pothuraju.
Please sign in to rate this answer.
Raja Pothuraju 8,095 Reputation points Microsoft Vendor

2024-07-09T16:55:02.6433333+00:00

Hello @祎李,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Raja Pothuraju 8,095 Reputation points Microsoft Vendor

2024-07-11T16:11:01.4933333+00:00

hello @祎李,Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

key vault Download CSR

1 answer

Your answer