Skip to content

Commit 7a653a3

Browse files
authored
Update keyvault-moveregion.md
1 parent 8021687 commit 7a653a3

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

articles/key-vault/general/keyvault-moveregion.md

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -16,18 +16,17 @@ Customer intent: As a key vault administrator, I want to move my vault to anothe
1616

1717
# Move an Azure key vault across regions
1818

19-
Key Vault doesn't support a resource move operation that permits moving a key vault from one region to another. This article covers workarounds for organizations that have a business need to move a key vault to another region. Each workaround option has limitations. It is critical to understand the implications of these workarounds before you attempt to apply them in a production environment.
19+
Azure Key Vault doesn't support a resource move operation that permits moving a key vault from one region to another. This article covers workarounds for organizations that have a business need to move a key vault to another region. Each workaround option has limitations. It's critical to understand the implications of these workarounds before you attempt to apply them in a production environment.
2020

2121
To move a key vault to another region, you create a key vault in that other region and then manually copy each individual secret from your existing key vault to the new key vault. You can do this by using either of the following two options.
2222

2323
## Design considerations
2424

25-
* Key vault names are globally unique. You can't reuse a vault name.
26-
27-
* You need to reconfigure access policies and network configuration settings in the new key vault.
25+
Before you begin, keep in mind the following concepts:
2826

27+
* Key vault names are globally unique. You can't reuse a vault name.
28+
* You need to reconfigure your access policies and network configuration settings in the new key vault.
2929
* You need to reconfigure soft-delete and purge protection in the new key vault.
30-
3130
* The backup and restore operation won't preserve your autorotation settings. You might need to reconfigure the settings.
3231

3332
## Option 1: Use the key vault backup and restore commands
@@ -38,8 +37,8 @@ Using the backup and restore commands has two limitations:
3837

3938
* You can't back up a key vault in one geography and restore it into another geography. For more information, see [Azure geographies](https://azure.microsoft.com/global-infrastructure/geographies/).
4039

41-
* The backup command backs up all versions of each secret. If you have a secret with a large number (more than 10) of previous versions, the request might exceed the maximum allowed request size and the operation might fail.
40+
* The backup command backs up all versions of each secret. If you have a secret with a large number of previous versions (more than 10), the request size might exceed the allowed maximum and the operation might fail.
4241

4342
## Option 2: Manually download and upload the key vault secrets
4443

45-
You can download certain secret types manually. For example, you can download certificates as a .pfx file. This option eliminates the geographical restrictions for some secret types, such as certificates. You can upload the .pfx files to any key vault in any region. The secrets are downloaded in a non-password protected format. You are responsible for securing your secrets during the move.
44+
You can download certain secret types manually. For example, you can download certificates as a PFX file. This option eliminates the geographical restrictions for some secret types, such as certificates. You can upload the PFX files to any key vault in any region. The secrets are downloaded in a non-password protected format. You are responsible for securing your secrets during the move.

0 commit comments

Comments
 (0)