| title | description | services | author | manager | tags | ms.service | ms.topic | ms.custom | ms.date | ms.author |
|---|---|---|---|---|---|---|---|---|---|---|
Azure Quickstart - Set and retrieve a secret from Key Vault using Azure portal | Microsoft Docs |
Quickstart showing how to set and retrieve a secret from Azure Key Vault using the Azure portal |
key-vault |
barclayn |
barbkess |
azure-resource-manager |
key-vault |
quickstart |
mvc |
03/14/2019 |
barclayn |
Azure Key Vault is a cloud service that provides a secure store for secrets. You can securely store keys, passwords, certificates, and other secrets. Azure key vaults may be created and managed through the Azure portal. In this quickstart, you create a key vault, then use it to store a secret. For more information on Key Vault, review the Overview.
If you don't have an Azure subscription, create a free account before you begin.
Sign in to the Azure portal at https://portal.azure.com.
-
Select the Create a resource option on the upper left-hand corner of the Azure portal
-
In the Search box, enter Key Vault.
-
From the results list, choose Key Vault.
-
On the Key Vault section, choose Create.
-
On the Create key vault section provide the following information:
- Name: A unique name is required. For this quickstart we use Contoso-vault2.
- Subscription: Choose a subscription.
- Under Resource Group choose Create new and enter a resource group name.
- In the Location pull-down menu, choose a location.
- Leave the other options to their defaults.
-
After providing the information above, select Create.
Take note of the two properties listed below:
- Vault Name: In the example, this is Contoso-Vault2. You will use this name for other steps.
- Vault URI: In the example, this is https://contoso-vault2.vault.azure.net/. Applications that use your vault through its REST API must use this URI.
At this point, your Azure account is the only one authorized to perform operations on this new vault.
To add a secret to the vault, you just need to take a couple of additional steps. In this case, we add a password that could be used by an application. The password is called ExamplePassword and we store the value of hVFkk965BuUv in it.
- On the Key Vault properties pages select Secrets.
- Click on Generate/Import.
- On the Create a secret screen choose the following values:
- Upload options: Manual.
- Name: ExamplePassword.
- Value: hVFkk965BuUv
- Leave the other values to their defaults. Click Create.
Once that you receive the message that the secret has been successfully created, you may click on it on the list. You can then see some of the properties. If you click on the current version, you can see the value you specified in the previous step.
By clicking "Show Secret Value" button in the right pane, you can see the hidden value.
Other Key Vault quickstarts and tutorials build upon this quickstart. If you plan to continue on to work with subsequent quickstarts and tutorials, you may wish to leave these resources in place. When no longer needed, delete the resource group, which deletes the Key Vault and related resources. To delete the resource group through the portal:
- Enter the name of your resource group in the Search box at the top of the portal. When you see the resource group used in this quickstart in the search results, select it.
- Select Delete resource group.
- In the TYPE THE RESOURCE GROUP NAME: box type in the name of the resource group and select Delete.
In this quickstart, you have created a Key Vault and stored a secret. To learn more about Key Vault and how you can use it with your applications, continue to the tutorial for web applications working with Key Vault.
[!div class="nextstepaction"] To learn how to read a secret from Key Vault from a web application using managed identities for Azure resources, continue with the following tutorial Configure an Azure web application to read a secret from Key vault.