VaultCertificate Class

Describes a single certificate reference in a Key Vault, and where the certificate should reside on the VM.

Inheritance

Model

VaultCertificate

Constructor

VaultCertificate(*, certificate_url: Optional[str] = None, certificate_store: Optional[str] = None, **kwargs)

Parameters

certificate_url

str

Required

This is the URL of a certificate that has been uploaded to Key Vault as a secret. For adding a secret to the Key Vault, see Add a key or secret to the key vault. In this case, your certificate needs to be It is the Base64 encoding of the following JSON Object which is encoded in UTF-8: <br>``<br> {<br> "data":"<Base64-encoded-certificate>",:code:
"dataType":"pfx",:code:
"password":"<pfx-file-password>"<br>}.

certificate_store

str

Required

For Windows VMs, specifies the certificate store on the Virtual Machine to which the certificate should be added. The specified certificate store is implicitly in the LocalMachine account. <br>``<br>For Linux VMs, the certificate file is placed under the /var/lib/waagent directory, with the file name :code:<UppercaseThumbprint>.crt for the X509 certificate file and <UppercaseThumbprint>.prv for private key. Both of these files are .pem formatted.