Azure / Azure/azure-powershell

[Import-AzKeyVaultSecurityDomain]: Add Parameter For Providing Private Key Password

Open
#24,245 6 comments 0 reactions 0 assignees View on GitHub
act-identity-squad Azure PS Team feature-request KeyVault Tracking
Dominant language
C#
Stars
4.8k
Forks
4.3k
Avg merge
2d 17h
Merged PRs (30d)
51

Description

### Description of the new feature

The az cli command (az keyvault security-domain restore-blob) to encrypt a security domain blob file with exchange key has an option to provide passwords for the private keys. The equivalent powershell command (Import-AzKeyVaultSecurityDomain) has no such option. To use the powershell command it needs the private keys without any password protection. This is risky and would be better if the password for private keys can be provided during the security domain encrypt/decrypt process.

az keyvault security-domain restore-blob: https://learn.microsoft.com/en-us/cli/azure/keyvault/security-domain?view=azure-cli-latest#az-keyvault-security-domain-restore-blob
Import-AzKeyVaultSecurityDomain: https://learn.microsoft.com/en-us/powershell/module/az.keyvault/import-azkeyvaultsecuritydomain?view=azps-11.3.0

### Proposed implementation details (optional)

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.