Assign permission in KeyVaultWindows extension

%3CLINGO-SUB%20id%3D%22lingo-sub-1721576%22%20slang%3D%22en-US%22%3EAssign%20permission%20in%20KeyVaultWindows%20extension%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1721576%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20are%20using%20KeyVaultWindows%20extension%20on%20our%20VMSS%20ARM%20template%2C%20we%20can%20pull%20down%20certificates%2C%20is%20there%20a%20way%20we%20can%20assign%20%22network%20service%22%20permission%20to%20the%20certs%20and%20secrets%20while%20downloading%20%3F%20We%20also%20use%20dsms%20extension%20which%20support%20that.%20But%20we%20are%20planning%20to%20migrate%20our%20certs%2C%20secrets%20to%20key%20vault%20now.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks%2C%3C%2FP%3E%0A%3CP%3ERita%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Microsoft

Hello, 

 

We are using KeyVaultWindows extension on our VMSS ARM template, we can pull down certificates, is there a way we can assign "network service" permission to the certs and secrets while downloading ? We also use dsms extension which support that. But we are planning to migrate our certs, secrets to key vault now. 

 

 

Thanks,

Rita

0 Replies