Customer managed key configuration

News Knowledge Base
1

While Configuring Customer managed key Configuration, "We couldn't connect to azure key vault, Check your credentials and try again."

Root Cause: The principal is missing one or more of the required permissions on the Azure Key Vault to access the key.

Resolution: Follow the below steps to add the missing permission to the principal on the key vault,

  1. Navigate to the key vault, where Secure is stored. Find the key vault name and key name mentioned at the end of the error message

  1. Select Access Policies and review the Key Permissions assigned to the application

  1. Select the service principal and click Edit to add the missing permissions

Note: The principal should be assigned a total of 2 key permissions:

  • Wrap Key
  • Unwrap Key

  1. Select any of the missing permissions and save the changes.