You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-machines/extensions/key-vault-linux.md
+3-11Lines changed: 3 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -26,17 +26,15 @@ The Key Vault VM extension supports these Linux distributions:
26
26
27
27
> [!NOTE]
28
28
> To get extended security features, prepare to upgrade Ubuntu 16.04 and Debian 9 systems as these versions are reaching their end of designated support period.
29
-
>
30
29
31
30
> [!NOTE]
32
-
> The Key Vault VM Extension downloads the certificates in the default location or to the location provided by "certStoreLocation" property in the VM Extension settings. The KeyValut VM Extension updates the folder permission to 700 (drwx------) allowing read, write and execute permission to the owner of the folder only
31
+
> The Key Vault VM Extension downloads the certificates in the default location or to the location provided by "certStoreLocation" property in the VM Extension settings. The Key Vault VM Extension updates the folder permission to 700 (drwx------) allowing read, write and execute permission to the owner of the folder only
33
32
34
33
### Supported certificate content types
35
34
36
35
- PKCS #12
37
36
- PEM
38
37
39
-
40
38
## Prerequisites
41
39
- Key Vault instance with certificate. See [Create a Key Vault](../../key-vault/general/quick-create-portal.md)
42
40
- VM/VMSS must have assigned [managed identity](../../active-directory/managed-identities-azure-resources/overview.md)
@@ -59,7 +57,8 @@ The Key Vault VM extension supports these Linux distributions:
59
57
}
60
58
`
61
59
## Key Vault VM extension version
62
-
* Users can chose to upgrade their key vault vm extension version to `V2.0` to use full certificate chain download feature. Issuer certificates (intermediate and root) will be appended to the leaf certificate in the PEM file.
60
+
61
+
* Users can chose to upgrade their Key Vault vm extension version to `V2.0` to use full certificate chain download feature. Issuer certificates (intermediate and root) will be appended to the leaf certificate in the PEM file.
63
62
64
63
* If you prefer to upgrade to `v2.0`, you would need to delete `v1.0` first, then install `v2.0`.
65
64
```azurecli
@@ -70,9 +69,6 @@ The Key Vault VM extension supports these Linux distributions:
70
69
71
70
* If the VM has certificates downloaded by v1.0, deleting the v1.0 AKVVM extension will NOT delete the downloaded certificates. After installing v2.0, the existing certificates will NOT be modified. You would need to delete the certificate files or roll-over the certificate to get the PEM file with full-chain on the VM.
72
71
73
-
74
-
75
-
76
72
## Extension schema
77
73
78
74
The following JSON shows the schema for the Key Vault VM extension. The extension does not require protected settings - all its settings are considered information without security impact. The extension requires a list of monitored secrets, polling frequency, and the destination certificate store. Specifically:
@@ -120,8 +116,6 @@ The following JSON shows the schema for the Key Vault VM extension. The extensio
120
116
> Also **required** for **Azure Arc-enabled VMs**.
121
117
> Set msiEndpoint to `http://localhost:40342/metadata/identity`.
122
118
123
-
124
-
125
119
### Property values
126
120
127
121
| Name | Value / Example | Data Type |
@@ -139,7 +133,6 @@ The following JSON shows the schema for the Key Vault VM extension. The extensio
Azure VM extensions can be deployed with Azure Resource Manager templates. Templates are ideal when deploying one or more virtual machines that require post deployment refresh of certificates. The extension can be deployed to individual VMs or virtual machine scale sets. The schema and configuration are common to both template types.
@@ -233,7 +226,6 @@ The Azure PowerShell can be used to deploy the Key Vault VM extension to an exis
0 commit comments