You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/key-vault/certificates/about-certificates.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,15 +8,15 @@ tags: azure-resource-manager
8
8
ms.service: key-vault
9
9
ms.subservice: certificates
10
10
ms.topic: overview
11
-
ms.date: 09/04/2019
11
+
ms.date: 01/04/2023
12
12
ms.author: mbaldwin
13
13
---
14
14
15
15
# About Azure Key Vault certificates
16
16
17
17
Azure Key Vault certificate support provides for management of your X.509 certificates and the following behaviors:
18
18
19
-
- Allows a certificate owner to create a certificate through a key vault creation process or through the import of an existing certificate. This includes both self-signed certificates and certificates that are generated from a certificate authority (CA).
19
+
- Allows a certificate owner to create a certificate through a key vault creation process or through the import of an existing certificate. Imported certificates include both self-signed certificates and certificates that are generated from a certificate authority (CA).
20
20
- Allows a Key Vault certificate owner to implement secure storage and management of X.509 certificates without interacting with private key material.
21
21
- Allows a certificate owner to create a policy that directs Key Vault to manage the lifecycle of a certificate.
22
22
- Allows a certificate owner to provide contact information for notifications about the lifecycle events of expiration and renewal.
@@ -66,7 +66,7 @@ A Key Vault certificate has the following attribute:
66
66
67
67
-`enabled`: This Boolean attribute is optional. Default is `true`. It can be specified to indicate if the certificate data can be retrieved as a secret or operable as a key.
68
68
69
-
This attribute is also used in conjunction with `nbf` and `exp` when an operation occurs between `nbf` and `exp`, but only if `enabled` is set to `true`. Operations outside the `nbf` and `exp` window are automatically disallowed.
69
+
This attribute is also used with `nbf` and `exp` when an operation occurs between `nbf` and `exp`, but only if `enabled` is set to `true`. Operations outside the `nbf` and `exp` window are automatically disallowed.
70
70
71
71
A response includes these additional read-only attributes:
72
72
@@ -96,7 +96,7 @@ At a high level, a certificate policy contains the following information:
96
96
- X.509 certificate properties, which include subject name, subject alternate names, and other properties that are used to create an X.509 certificate request.
97
97
- Key properties, which include key type, key length, exportable, and `ReuseKeyOnRenewal` fields. These fields instruct Key Vault on how to generate a key.
98
98
99
-
[Supported key types](/rest/api/keyvault/certificates/create-certificate/create-certificate#jsonwebkeytype) are RSA, RSA-HSM, EC, EC-HSM, and oct.
99
+
[Supported key types](/rest/api/keyvault/certificates/create-certificate/create-certificate#jsonwebkeytype) are RSA, RSA-HSM, EC, EC-HSM, and oct.
100
100
- Secret properties, such as the content type of an addressable secret to generate the secret value, for retrieving a certificate as a secret.
101
101
- Lifetime actions for the Key Vault certificate. Each lifetime action contains:
The code samples below will show you how to create a client, set a certificate, retrieve a certificate, and delete a certificate.
114
+
These code samples demonstrate how to create a client, set a certificate, retrieve a certificate, and delete a certificate.
115
115
116
116
### Set up the app framework
117
117
@@ -233,11 +233,11 @@ The code samples below will show you how to create a client, set a certificate,
233
233
234
234
## Integrating with App Configuration
235
235
236
-
The Azure SDK provides a helper method, [parseKeyVaultCertificateIdentifier](/javascript/api/@azure/keyvault-certificates#parseKeyVaultCertificateIdentifier_string_), to parse the given Key Vault certificate ID. This is necessary if you use [App Configuration](../../azure-app-configuration/index.yml) references to Key Vault. App Config stores the Key Vault certificate ID. You need the _parseKeyVaultCertificateIdentifier_ method to parse that ID to get the certificate name. Once you have the certificate name, you can get the current certificate using code from this quickstart.
236
+
The Azure SDK provides a helper method, [parseKeyVaultCertificateIdentifier](/javascript/api/@azure/keyvault-certificates#parseKeyVaultCertificateIdentifier_string_), to parse the given Key Vault certificate ID, which is necessary if you use [App Configuration](../../azure-app-configuration/index.yml) references to Key Vault. App Config stores the Key Vault certificate ID. You need the _parseKeyVaultCertificateIdentifier_ method to parse that ID to get the certificate name. Once you have the certificate name, you can get the current certificate using code from this quickstart.
237
237
238
238
## Next steps
239
239
240
-
In this quickstart, you created a key vault, stored a certificate, and retrieved that certificate. To learn more about Key Vault and how to integrate it with your applications, continue on to the articles below.
240
+
In this quickstart, you created a key vault, stored a certificate, and retrieved that certificate. To learn more about Key Vault and how to integrate it with your applications, continue on to these articles.
241
241
242
242
- Read an [Overview of Azure Key Vault](../general/overview.md)
243
243
- Read an [Overview of certificates](about-certificates.md)
0 commit comments