Update enable-key-vault-virtual-machine.md

Fixing indentation

Author: ShannonLeavitt

articles/cloud-services-extended-support/enable-key-vault-virtual-machine.md

@@ -51,63 +51,64 @@ To use the Azure Key Vault VM extension, you need to have an Azure Active Direct
     - If you are using RBAC preview, search for the name of the AAD app you created and assign it to the Key Vault Secrets User (preview) role.
     - If you are using vault access policies, then assign **Secret-Get** permissions to the AAD app you created. For more information, see [Assign access policies](../key-vault/general/assign-access-policy-portal.md)
 
-7. Install first version of the certificates created in the first step and the Key Vault VM extension using the ARM template snippet for `cloudService` resource as shown below:
+7. Install first 
+step and the Key Vault VM extension using the ARM template snippet for `cloudService` resource as shown below:
 
-```json
-{
-    "osProfile":
+    ```json
     {
-        "secrets":
-        [
-            {
-                "sourceVault":
+        "osProfile":
+        {
+            "secrets":
+            [
                 {
-                    "id": "[parameters('sourceVaultValue')]"
-                },
-                "vaultCertificates":
-                [
+                    "sourceVault":
                     {
-                        "certificateUrl": "[parameters('bootstrpCertificateUrlValue')]"
-                    }
-                ]
-            }
-        ]
-    },
-    "extensionProfile":
-    {
-        "extensions":
-        [
-            {
-                "name": "KVVMExtensionForPaaS",
-                "properties":
+                        "id": "[parameters('sourceVaultValue')]"
+                    },
+                    "vaultCertificates":
+                    [
+                        {
+                            "certificateUrl": "[parameters('bootstrpCertificateUrlValue')]"
+                        }
+                    ]
+                }
+            ]
+        },
+        "extensionProfile":
+        {
+            "extensions":
+            [
                 {
-                    "type": "KeyVaultForPaaS",
-                    "autoUpgradeMinorVersion": true,
-                    "typeHandlerVersion": "1.0",
-                    "publisher": "Microsoft.Azure.KeyVault",
-                    "settings":
+                    "name": "KVVMExtensionForPaaS",
+                    "properties":
                     {
-                        "secretsManagementSettings":
-                        {
-                            "pollingIntervalInS": "3600",
-                            "certificateStoreName": "My",
-                            "certificateStoreLocation": "LocalMachine",
-                            "linkOnRenewal": false,
-                            "requireInitialSync": false,
-                            "observedCertificates": "[parameters('keyVaultObservedCertificates']"
-                        },
-                        "authenticationSettings":
+                        "type": "KeyVaultForPaaS",
+                        "autoUpgradeMinorVersion": true,
+                        "typeHandlerVersion": "1.0",
+                        "publisher": "Microsoft.Azure.KeyVault",
+                        "settings":
                         {
-                            "clientId": "Your AAD app ID",
-                            "clientCertificateSubjectName": "Your boot strap certificate subject name [Do not include the 'CN=' in the subject name]"
+                            "secretsManagementSettings":
+                            {
+                                "pollingIntervalInS": "3600",
+                                "certificateStoreName": "My",
+                                "certificateStoreLocation": "LocalMachine",
+                                "linkOnRenewal": false,
+                                "requireInitialSync": false,
+                                "observedCertificates": "[parameters('keyVaultObservedCertificates']"
+                            },
+                            "authenticationSettings":
+                            {
+                                "clientId": "Your AAD app ID",
+                                "clientCertificateSubjectName": "Your boot strap certificate subject name [Do not include the 'CN=' in the subject name]"
+                            }
                         }
                     }
                 }
-            }
-        ]
+            ]
+        }
     }
-}
-```
+    ```
     You might need to specify the certificate store for boot strap certificate in ServiceDefinition.csdef like below:
 
     ```xml