You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -37,33 +37,33 @@ After you enable customer-managed keys, you need to associate the customer manag
37
37
38
38
# [Key Vault](#tab/Key-Vault)
39
39
40
-
1. To turn on both soft delete and purge protection when creating a vault, use the [az keyvault create](/cli/azure/keyvault#az-keyvault-create) command.
40
+
2. To turn on both soft delete and purge protection when creating a vault, use the [az keyvault create](/cli/azure/keyvault#az-keyvault-create) command.
1. To add purge protection to an existing vault (that already has soft delete enabled), use the [az keyvault update](/cli/azure/keyvault#az-keyvault-update) command.
45
+
3. To add purge protection to an existing vault (that already has soft delete enabled), use the [az keyvault update](/cli/azure/keyvault#az-keyvault-update) command.
46
46
47
47
```azurecli-interactive
48
48
az keyvault update --name contoso-SB-BYOK-keyvault --resource-group ContosoRG --enable-purge-protection true
1. To turn on both soft delete and purge protection when creating a vault, use the [az keyvault create](/cli/azure/keyvault#az-keyvault-create) command.
53
+
2. To turn on both soft delete and purge protection when creating a vault, use the [az keyvault create](/cli/azure/keyvault#az-keyvault-create) command.
1. To add purge protection to an existing vault (that already has soft delete enabled), use the [az keyvault update](/cli/azure/keyvault#az-keyvault-update) command.
58
+
3. To add purge protection to an existing vault (that already has soft delete enabled), use the [az keyvault update](/cli/azure/keyvault#az-keyvault-update) command.
59
59
60
60
```azurecli-interactive
61
61
az keyvault update --hsm-name contoso-SB-BYOK-keyvault --resource-group ContosoRG --enable-purge-protection true
62
62
```
63
63
64
64
---
65
65
66
-
1. Create keys by following these steps:
66
+
4. Create keys by following these steps:
67
67
1. To create a new key, select **Generate/Import** from the **Keys** menu under **Settings**.
"userAssignedIdentity": "/subscriptions/<AZURE SUBSCRIPTION ID>/resourceGroups/<RESOURCE GROUP NAME>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<USER MANAGED IDENTITY NAME>"
529
+
}
530
+
}
531
+
}
532
+
}
533
+
```
534
534
535
535
---
536
536
537
-
In the parameter file, replace placeholders with appropriate values.
538
-
539
-
| Placeholder | value |
540
-
| ----------- | ----- |
541
-
| `<ServiceBusNamespaceName>` | Name of the Service Bus namespace. |
542
-
| `<Location>` | Location where you want the namespace to be created. |
543
-
| `<KeyVaultName>` | Name of the key vault. |
544
-
| `<KeyName>` | Name of the key in the key vault. |
545
-
| `<AZURE SUBSCRIPTION ID>` | Your Azure subscription ID. |
546
-
| `<RESOURCE GROUP NAME>` | Resource group of the user-managed identity. |
547
-
| `<USER MANAGED IDENTITY NAME>` | Name of the user-managed identity. |
537
+
In the parameter file, replace placeholders with appropriate values.
538
+
539
+
| Placeholder | value |
540
+
| ----------- | ----- |
541
+
|`<ServiceBusNamespaceName>`| Name of the Service Bus namespace. |
542
+
|`<Location>`| Location where you want the namespace to be created. |
543
+
|`<KeyVaultName>`| Name of the key vault. |
544
+
|`<KeyName>`| Name of the key in the key vault. |
545
+
|`<AZURE SUBSCRIPTION ID>`| Your Azure subscription ID. |
546
+
|`<RESOURCE GROUP NAME>`| Resource group of the user-managed identity. |
547
+
|`<USER MANAGED IDENTITY NAME>`| Name of the user-managed identity. |
548
548
549
549
3. Run the following PowerShell command to deploy the Resource Manager template. Replace `{MyRG}` with the name of your resource group before running the command.
0 commit comments