Skip to content

Commit 7a66d30

Browse files
authored
Update certificate-scenarios.md
1 parent 7941dc4 commit 7a66d30

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

articles/key-vault/certificates/certificate-scenarios.md

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -96,12 +96,14 @@ Key Vault service sends requests to CA (outbound traffic). Therefore, it’s ful
9696

9797
### Formats of Import we support
9898
Azure Key Vault supports .pem and .pfx certificate files for importing Certificates into Key vault.
99-
We support the following type of Import for PEM file format. A single PEM encoded certificate along with a PKCS#8 encoded, unencrypted key which has the following
99+
We support the following type of Import for PEM file format. A single PEM encoded certificate along with a PKCS#8 encoded, unencrypted key which has the following format:
100100

101101
-----BEGIN CERTIFICATE-----
102+
102103
-----END CERTIFICATE-----
103104

104105
-----BEGIN PRIVATE KEY-----
106+
105107
-----END PRIVATE KEY-----
106108

107109
When you are importing the certificate, you need to ensure that the key is included in the file itself. If you have the private key separately in a different format, you would need to combine the key with the certificate. Some certificate authorities provide certificates in different formats, therefore before importing the certificate, make sure that they are either in .pem or .pfx format.
@@ -111,10 +113,12 @@ When you are importing the certificate, you need to ensure that the key is inclu
111113
>Ensure that no other meta data is present in the certificate file and that the private key not showing as encrypted.
112114
113115
### Formats of Merge CSR we support
116+
114117
AKV supports 2 PEM based formats. You can either merge a single PKCS#8 encoded certificate or a base64 encoded P7B (chain of certificates signed by CA).
115118
If you need to covert the P7B's format to the supported one, you can use [certutil -encode](/windows-server/administration/windows-commands/certutil#-encode)
116119

117120
-----BEGIN CERTIFICATE-----
121+
118122
-----END CERTIFICATE-----
119123

120124

0 commit comments

Comments
 (0)