You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
Currently when you are wanting to configure Managed Keys with azurekeyvault for use within the PKI engine, only RSA-HSM keys are supported. This is not ideal in the event you wish to run up EC based issuers, as the preference would be to use EC-HSM over RSA-HSM keys.
EC-HSM Keys are supported in both Azure Key Vault and Azure Key Vault Managed HSM and therefore should be supported for use as managed keys in Hashicorp Vault as well.
Also side note... When using Managed-Keys with Azure Key vault, it is still requiring a client_id and a client_secret regarless even though I am intending on using the associated MSI to authenticate to the Key Vault..
Is your feature request related to a problem? Please describe.
Currently when you are wanting to configure Managed Keys with azurekeyvault for use within the PKI engine, only RSA-HSM keys are supported. This is not ideal in the event you wish to run up EC based issuers, as the preference would be to use EC-HSM over RSA-HSM keys.
Reference to the managed-keys api doc: https://github.com/hashicorp/vault/blob/main/website/content/api-docs/system/managed-keys.mdx#azure-key-vault-parameters
EC-HSM Keys are supported in both Azure Key Vault and Azure Key Vault Managed HSM and therefore should be supported for use as managed keys in Hashicorp Vault as well.
https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys#hsm-protected-keys
Describe the solution you'd like
What I would like to see is EC-HSM Keys supported when using azurekeyvault with Managed Keys
Describe alternatives you've considered
N/A
Explain any additional use-cases
N/A
Additional context
N/A
The text was updated successfully, but these errors were encountered: