How to Automate Updates in Azure Key Vault with AppViewX CERT+

Azure Key Vault provides secure cloud storage and access for secrets, keys and certificates. The process for certificate and key management in Azure Key Vault is mostly manual which becomes challenging and complex for large organizations who require large volumes of certificates.

AppViewX CERT+ is seamlessly integrated with Azure Key Vault to provide end-to-end automation for Certificate Lifecycle Management (CLM). Using AppViewX CERT+ administrators can automatically provision certificates from a CA (Certificate Authority) and install them directly on servers and/or load balancers. AppViewX CERT+ also provides the capability to manage cloud services in its inventory, including Azure Cloud and Key vault.

The example below demonstrates how AppViewX CERT+ can seamlessly update all certificates and keys in Azure Key Vault.

First, Azure Cloud Service can be added onboarded to AppViewX CERT+ under Cloud.

Once that is complete, there are two options:

  1. The end user can push the certificate from the Certificate Inventory in AppViewX CERT+ to Azure Key Vault with a click of a button.

2. Or a bulk/multi certificate push can be performed via the VW (workflow).

More importantly, an automation workflow can easily be put in place where a user only needs to approve or reject the (the workflow for multiple certificates) over the email which is sent by AppViewX.

This automated capability provided by AppViewX CERT+ keeps manual intervention to a minimum or only when required, at the discretion of the administrator.

Additionally, on the Azure side, AppViewX CERT+ can easily update the Azure Key Vault Service.

Setting ‘Access policies’ and ‘Application’ will give permission along with the ‘Client Secret’ details to AppViewX CERT+ to communicate (via APIs) with the Azure Key Vault Service.

To learn more about this capability and AppViewX CERT+ certificate lifecycle management use cases, contact AppViewX today.

--

--