Azure-cli: KeyVault certificate policy format

[adi658]

What does the json look like? How difficult was it to provide a json for policy on this page? I am trying to create a cert in vault. But it only creates SELF SIGNED. I need to create a key and csr for the non-partnered ca which i am just not able to find. Pls help

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: a9c661d7-bf43-5354-015e-3859f30a42a2
• Version Independent ID: fa69e552-5904-ce97-d02c-915c819bdde1
• Content: az keyvault certificate
• Content Source: src/command_modules/azure-cli-keyvault/azure/cli/command_modules/keyvault/_help.py
• Service: key-vault
• GitHub Login: @rloutlaw
• Microsoft Alias: routlaw

[xsreality]

+1. There is no help regarding JSON policy definition. No links to external page where this is explained. Currently trying to figure out how to create a certificate that is not signed by a known issuer.

[adi658]

Yes exactly, facing the same issue. Infact I contacted the Microsoft azure support team and they are yet to get back to me even after 4 days. Also, in powershell we have apis but same apis are not there in azure CLI. For ex : I can login yo portal and download certificate in pfx format but how do I do it using CLI? No clue. No examples given.

[xsreality]

@adi658 Please check if this one helps? https://github.com/Azure/azure-cli/issues/7489

[adi658]

Awesome... that helped.. So we use download secret instead of download certificate. Wierd :(

[Antiohne]

See the blog post of Peter Hobor: https://techblog.hobor.hu/2018/08/26/self-signed-certificate-with-sans-using-azure-cli-keyvault/

[jiasli]

You may use az keyvault certificate get-default-policy --scaffold to get a template to work with. This is a Python representation of Create Certificate REST API's body: https://docs.microsoft.com/en-us/rest/api/keyvault/createcertificate/createcertificate#certificatepolicy

[bim-msft]

As @jiasli said, az keyvault certificate get-default-policy --scaffold will give you a rough frame to work with. Closing this issue due to long time inactivity.