Cannot Import Certificate into Azure Key Vault

Carolyn Schroeder 186 Reputation points
2024-07-04T08:09:26.8666667+00:00

I am trying to import a certificate into Azure Key Vault but getting the error "The parameter keyVaultCsmId has an invalid value."

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,175 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. akinbade abiola 7,430 Reputation points
    2024-07-04T08:24:03.57+00:00

    Hello Carolyn Schroeder,

    Thanks for your question.

    It is possible your certificate in AKV was imported as pem and not as pcks12. Re-import the cert from a pfx file with the --password parameter.

    az keyvault certificate import --password $password

    See: https://video2.skills-academy.com/en-us/cli/azure/keyvault/certificate?view=azure-cli-latest#az-keyvault-certificate-import

    Also see similar issue here from stackoverflow for an alternative solution: https://stackoverflow.com/questions/65781652/error-the-parameter-keyvaultcsmid-has-an-invalid-value-while-adding-app-servic

    You can mark it 'Accept Answer' and 'Upvote' if this helped you

    Regards,

    Abiola

  2. Jing Zhou 4,670 Reputation points Microsoft Vendor
    2024-07-04T08:24:16.26+00:00

    Hello,

     

    Thank you for posting in Q&A forum.

    Check if your Key Vault is set to use "Azure role-based access control" under "Access configuration". It needs to be set to "Vault access policy" instead.

    User's image

    Currently, App Service Certificate supports only Key Vault access policies, not the RBAC model. Source: https://video2.skills-academy.com/en-us/azure/app-service/configure-ssl-certificate?tabs=apex%2Cportal#store-certificate-in-azure-key-vault

     

    Best regards，

    Jill Zhou

     

     

    If the Answer is helpful, please click "Accept Answer" and upvote it.