Forum Discussion
Central pki
Has anyone implemented a centralised PKI where the Root CA is stored in Azure Key Vault and workloads can automatically obtain the Root CA when they are deployed, as well as receive updated versions ...
May consider to use Azure Key Vault for secure certificate storage combined with Microsoft Cloud PKI and Intune (for endpoint distribution), and cert-manager with Workload Identity Federation (for AKS/containers). Azure Key Vault alone does not automatically distribute trust anchors across workloads; you need automation pipelines or Intune/cert-manager integration to consistently push the Root CA.