You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/key-vault/general/keyvault-moveregion.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -20,7 +20,7 @@ Customer intent: As a key vault administrator, I want to move my vault to anothe
20
20
21
21
Key Vault does not support a resource move operation that permits moving a key vault to another region. This article will cover workarounds if you have a business need to move a key vault to another region. Each option has limitations and it is critical to understand the implications of these workarounds before attempting them in a production environment.
22
22
23
-
If you need to move a key vault to another region, the solution is to create a new key vault in the desired region and manually copy over each individual secret from your existing key vault to the new key vault. This can be done in either of the following ways listed below.
23
+
If you need to move a key vault to another region, the solution is to create a new key vault in the desired region and manually copy over each individual secret from your existing key vault to the new key vault. This operation can be done in either of the following ways listed below.
24
24
25
25
## Design Considerations
26
26
@@ -30,20 +30,20 @@ If you need to move a key vault to another region, the solution is to create a n
30
30
31
31
* You will need to reconfigure soft-delete and purge protection in the new key vault.
32
32
33
-
* The backup / restore operation will not preserve auto-rotation settings you may need to reconfigure these settings.
33
+
* The back up and restore operation will not preserve autorotation settings you may need to reconfigure these settings.
34
34
35
35
## Option 1 - Use the key vault backup and restore commands
36
36
37
-
You can backup each individual secret, key, and certificate in your vault using the backup command. This will download your secrets as an encrypted blob. You can then restore the blob into your new key vault. The commands are documented in the link below.
37
+
You can back up each individual secret, key, and certificate in your vault using the backup command. Your secrets will be downloaded as an encrypted blob. You can then restore the blob into your new key vault. The commands are documented in the link below.
* You cannot backup a key vault in one geography and restore it into another geography. Learn more about Azure geographies. [Link](https://azure.microsoft.com/global-infrastructure/geographies/)
43
+
* You cannot back up a key vault in one geography and restore it into another geography. Learn more about Azure geographies. [Link](https://azure.microsoft.com/global-infrastructure/geographies/)
44
44
45
45
* The backup command backs up all versions of each secret. If you have a secret with a large number of previous versions (greater than 10) there is a chance the request will exceed the maximum allowed request size and the operation may fail.
46
46
47
-
## Option 2 - Manually download and re-upload secrets
47
+
## Option 2 - Manually download and upload secrets
48
48
49
-
Certain secret types can be manually downloaded. For example, you can download certificates as a .pfx file. This eliminates the geographical restrictions. You can re-upload the .pfx files to any key vault in any region. Your secret will be downloaded in a non-password protected format.You will be responsible for securing your secrets once they leave Key Vault while the move is performed.
49
+
Certain secret types can be manually downloaded. For example, you can download certificates as a .pfx file. This option eliminates the geographical restrictions for some secret types such as certificates. You can upload the .pfx files to any key vault in any region. Your secret will be downloaded in a non-password protected format.You will be responsible for securing your secrets once they leave Key Vault while the move is performed.
0 commit comments