Documentation

Homepage

Overview

Overview

Encryption is a proven means of securing data in the cloud. Secure management of the keys used is essential to effectively protecting data in the cloud. With Key Vault, keys and secret keys such as passwords can be encrypted using keys that are stored in HSMs (hardware security modules). Additional security is ensured if user keys are imported or generated in HSMs that are certified for FIPS 140-2 Level 2 and Common Criteria EAL4+.

This way, the keys do not leave the HSM system. With Key Vault, keys are invisible to Microsoft and cannot be extracted.

Getting Started

Getting Started

  1. 10/1/2015, Video, 0:17:36
    Today Amit Bapat introduces Scott to Azure Key Vault. With Azure Key Vault, you can encrypt keys and small secrets like passwords using keys stored in hardware security...
  2. 8/25/2015, Video, 1:16:24
    Managing cryptographic keys and secrets is an essential part of safeguarding data in the cloud. With the new Azure Key Vault service, customers can easily import/create,...
  3. 5/31/2017, Trainings
    Security is a top-level concern when it comes to cloud computing for organizations of all types. In this course, you will be introduced to Azure security and compliance. We...
  4. 9/28/2015, Video, 0:36:39
    In this session, learn how to use disk encryption management for IaaS virtual machines and Azure Key Vault to help protect and safeguard your data to meet your organizational...
  5. 10/11/2016, Video, 0:12:25
    For a Guide to a Modern IT Environment, click: http://aka.ms/GuideModernIT. We talk about on TechDefense the importance of encryption for businesses and look at one possible...
  6. 9/28/2016, Video, 1:25:09
    Microsoft Azure enables you to control your data in Azure through advanced technologies to encrypt, control & audit access, separate, and dispose of data according to your...

Learning

Learning Paths

Manage security operations in Azure
Published: 7/1/2020, Length: 6:51:00
Learn how to configure security policies and manage security alerts with the tools and services in Azure.
Migrate an ASP.NET web application to Azure with Visual Studio
Published: 6/30/2020, Length: 1:17:00
Migrate an ASP.NET web application to Azure with Visual Studio
Architect secure infrastructure in Azure
Published: 10/23/2019, Length: 6:37:00
Learn about the tools and services available on Azure to ensure your resources are secure.

Learning Modules

Manage secrets in your server apps with Azure Key Vault
Published: 9/24/2018, Length: 0:46:00
Introduction to securing data at rest on Azure
Published: 10/29/2019, Length: 0:30:00
Safeguard public sector data with Azure
Published: 2/23/2021, Length: 0:42:00

Azure Key Vault News

5/13/2022, MS Tech Community
  This blog was authored in collaboration with @Inwafula .   In recent years, cloud computing has grown in leaps and bounds due to its flexibility and agility in supporting business goals. Not...
5/12/2022, MS Tech Community
According to the National Institute of Standards and Technology, 21,957 vulnerabilities were published in 2021 alone. The challenge facing customers when securing their environments begins with...
5/11/2022, MS Tech Community
At Microsoft, we value, protect, and defend privacy. We believe in transparency, so that people and organizations can control their data and have meaningful choices in how it is used. We empower...
4/29/2022, Service Updates
Key Vault now enables you to automatically rotate keys for encryption of your data.
4/27/2022, MS Tech Community
We are on a quest to remove credentials where we can in dealing with Azure. Part 1 created a connection between GitHub and Azure using "federated...
4/20/2022, MS Tech Community
The Azure Arc team is happy to announce the GA of Azure Arc enabled Open Service Mesh. This is an extension for Arc enabled Kubernetes clusters. Open Service Mesh (OSM) is lightweight and...
4/19/2022, MS Tech Community
  Microsoft 365 Platform Community (PnP) April 2022 update is out with a summary of the latest guidance, samples, and solutions from Microsoft or from the community for the community. This...
4/18/2022, MS Tech Community
A managed identity from Azure Active Directory (Azure AD) allows your app to easily access other Azure AD-protected resources such as Azure Key Vault or Azure SQL. The identity is managed by the...
4/15/2022, MS Tech Community
  The Azure Well-Architected Framework assists architects in the creation and review of their cloud workloads with guidance spanning five pillars – reliability, security, cost optimization,...
4/13/2022, MS Tech Community
Scenario Deploy a Logic App’s API Connection (ex: Azure Blob Storage) while storing the credentials in Key Vault.   This example uses the Azure Blob Storage connector with the Authentication type...
3/30/2022, MS Tech Community
Spring Cloud Azure is an open-source project that provides seamless Spring integration with Azure services. It gives developers a Spring-idiomatic way to connect and consume Azure services, with...
3/30/2022, MS Tech Community
This is part two in a series on how to get rid of credentials wherever you can in Azure. The first part set the stage with configuring "federated credentials" for doing deployments based on Bicep...
3/29/2022, MS Tech Community
This how-to post focuses on how-to restore across different SQL Managed instances when using TDE with Customer Managed Keys.You can find and reference the whole series with the following...
3/29/2022, MS Tech Community
Contents DEFENDER FOR CLOUD DEFENDER FOR ENDPOINT (clients and servers) DEFENDER AV DEFENDER FOR INDENTITY DEFENDER FOR CLOUD APPS (CASB) MICROSOFT SENTINEL MICROSOFT INTUNE (why not defender for...
3/27/2022, MS Tech Community
    I love open-source, because it is a fantastic way to learn and share. I recently saw this tweet by Peter Klapwijk, who built a Logic App to monitor licenses of your Microsoft 365 tenant. The...
3/27/2022, MS Tech Community
Good Vibes Generator overview Idea   A Microsoft Teams bot We want Good Vibes. The world is a tough place to be and we all can use some positive affirmations and a little pep talk. Wouldn't it...
3/24/2022, MS Tech Community
Passwordless is a popular term, and it's been a long time since it was considered acceptable to store credentials directly in code. There are however many nuances of this and how you go about...
3/23/2022, MS Tech Community
      Microsoft CMMC Acceleration   We are actively building out Microsoft CMMC Acceleration by developing resources for both partners and Defense Industrial Base (DIB) companies to leverage in...
3/21/2022, MS Tech Community
Customers are finding value in utilizing group Managed Service Accounts (gMSA) for windows containers on Azure Kubernetes Service. The gMSA powershell module has enabled a smooth and easy process...
3/21/2022, MS Tech Community
Last August, Watchlist built-in templates were announced in Public Preview as a new feature of Microsoft Sentinel. Data in watchlists can be correlated with analytics rules, viewed in the entity...