Azure Key Vault Configuration for Kyvos
This documentation is for Kyvos 2026.8.x. To view documentation for other Kyvos versions, click here. |
|---|
Overview
This section describes how to configure Azure Key Vault to securely store and manage secrets, keys, and credentials required for Kyvos deployment.
Azure Key Vault is a cloud service that provides a secure store for secrets. You can securely store keys, passwords, certificates, and other secrets in the vault.
You can create and manage the key vaults through the Azure portal.
Creating a vault
Create a vault as explained at Quickstart - Create an Azure Key Vault with the Azure portal | Microsoft Learn
Note
The Vault Name and Vault URL for use later.
On this page:
Access configurations for Key Vault
Once you have created the Key Vault, navigate to the Access Configuration page, and perform the following steps:
From the Permission Model, select the option.
From the Resource Access, choose the following permissions (as shown in the figure below).
Azure Virtual Machines for deployment
Azure Resource Manager for template deployment
Azure Disk Encryption for volume encryption
Adding secret to Key Vault
To add a secret to the vault, you need to perform a few additional steps. In this case, we add a password that could be used by an application. The password is called ExamplePassword, and we store the value of hVFkk965BuUv in it.
On the Key Vault properties page, select Secrets.
Click on Generate/Import.
On the Create a secret screen, select the following values:
Upload options: Manual
Name: ExamplePassword
Value: hVFkk965BuUv
Leave the other values to their defaults. Click Create.
By clicking the Show Secret Value button in the right pane, you can see the hidden value.
Note
Please note down the Name of Secret given in the <secret-name> as you will need it later.