Other services and tools have integrated with Key Vault for optimized capabilities for specific tasks, such as monitoring. Storing your tenant key in the Azure Key Vault provides the following advantages: AdvantageĪzure Key Vault supports a number of built-in interfaces for key management, including PowerShell, CLI, REST APIs, and the Azure portal. In addition to managing keys, Azure Key Vault offers your security administrators the same management experience to store, access, and manage certificates and secrets (such as passwords) for other services and applications that use encryption. Benefits of using Azure Key VaultĪzure Key Vault provides a centralized and consistent key management solution for many cloud-based and on-premises services that use encryption. If the key administrators for these services are different, we recommend using dedicated subscriptions.
Confirming that all administrators who use the subscription have a solid understanding of every key they can access, means they are less likely to misconfigure your keys.Įxample: Using a shared Azure subscription when the administrators for your Azure Information Protection tenant key are the same individuals that administer your keys for Office 365 Customer Key and CRM online. To share an Azure subscription with other services that use Azure Key Vault, make sure that the subscription shares a common set of administrators. Dedicated Azure subscriptions:Īre more secure when different services have different administrators Exceeding service limits on the key vault where your tenant key is stored may cause response time throttling for Azure Rights Management service.Īs different services have varying key management requirements, Microsoft also recommends using a dedicated Azure subscription for your key vault. Dedicated key vaults help to ensure that calls by other services do not cause service limits to be exceeded. We recommend using a dedicated key vault for your tenant key. Using HSM-protected keys in the Azure Key Vault requires an Azure Key Vault Premium service tier, which incurs an additional monthly subscription fee.
0 kommentar(er)
