[Bug / Issue]: Key Vault name is already taken

[david-haver02862]

Jumpstart Solution

• Jumpstart ArcBox
• Jumpstart LocalBox
• Jumpstart Agora
• A specific Jumpstart scenario
• Jumpstart Drops
• Something else

What happened?

I am trying to deploy the Azure Arch Just Start for IT Pros (https://jumpstart.azure.com/azure_jumpstart_arcbox/ITPro) but the deployment fails because the Key Vault name is not unique. I have opened MS Support case # 2506270040003352 on this and support engineer is not able to help fix this. Can someone fix the template?

We need a URL from you

https://jumpstart.azure.com/azure_jumpstart_arcbox/ITPro

Deployment Method

Azure Portal

Relevant log output.

{"code":"DeploymentFailed","target":"/subscriptions/954f361d-4e4b-417e-b158-87a4dba0d758/resourceGroups/AzureArcBox-RG/providers/Microsoft.Resources/deployments/mgmtArtifactsAndPolicyDeployment","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.","details":[{"code":"ResourceDeploymentFailure","target":"/subscriptions/954f361d-4e4b-417e-b158-87a4dba0d758/resourceGroups/AzureArcBox-RG/providers/Microsoft.Resources/deployments/keyVaultDeployment","message":"The resource write operation failed to complete successfully, because it reached terminal provisioning state 'Failed'.","details":[{"code":"DeploymentFailed","target":"/subscriptions/954f361d-4e4b-417e-b158-87a4dba0d758/resourceGroups/AzureArcBox-RG/providers/Microsoft.Resources/deployments/keyVaultDeployment","message":"At least one resource deployment operation failed. Please list deployment operations for details. Please see https://aka.ms/arm-deployment-operations for usage details.","details":[{"code":"VaultAlreadyExists","message":"The vault name 'arcboxwfkkyotfk2bri' is already in use. Vault names are globally unique so it is possible that the name is already taken. If you are sure that the vault name was not taken then it is possible that a vault with the same name was recently deleted but not purged after being placed in a recoverable state. If the vault is in a recoverable state then the vault will need to be purged before reusing the name. For more information about VaultAlreadyExists, soft delete and purging a vault follow this link https://go.microsoft.com/fwlink/?linkid=2147740."}]}]}]}

Code of Conduct and Licensing

• I agree to follow this project's Code of Conduct and Licensing terms.

[janegilring]

@david-haver02862 Hi, can you find the Key Vault in the "Manage deleted vaults" overview? If so, you can try to purge it.

[david-haver02862]

There is nothing there. [cid:4da2b687-5c82-4bff-bacc-6e3866f3ee9e] David Haver (Day-vid Hay-ver) (Him,He) | Systems Engineering Architect Elephant Insurance Services, LLC | P.O. Box 5005 | Glen Allen, VA 23058 ***@***.******@***.***> Phone (804) 690-7669 elephant.com<https://www.elephant.com/> ***@***.***?anonymous&ep=bwmEmailSignature> Book time to meet with me<https://outlook.office.com/bookwithme/user/f9afae9ea81649ff87bbb16eebd7be3a%40elephant.com?anonymous>. My office hours are: M-F, 8AM - 5PM

…

________________________________ From: Jan Egil Ring ***@***.***> Sent: Friday, June 27, 2025 1:47 PM To: microsoft/azure_arc ***@***.***> Cc: David Haver ***@***.***>; Mention ***@***.***> Subject: Re: [microsoft/azure_arc] [Bug / Issue]: (Issue #3265) janegilring left a comment (microsoft/azure_arc#3265) @david-haver02862 Hi, can you find the Key Vault in the "Manage deleted vaults" overview? If so, you can try to purge it. image. png (view on web) — Reply to this email directly, view [https://avatars.githubusercontent.com/u/2039662?s=20&v=4]janegilring left a comment (microsoft/azure_arc#3265)<https://urldefense.com/v3/__https://github.com/microsoft/azure_arc/issues/3265*issuecomment-3013912954__;Iw!!Mb91!MOCpJYYsi-_D-3tY5SiSYfRdsdkNIAIpbZK3DfKbiN0XLU8Qe5AkZmmJpiSdyu0bR2vwhtoUFVo9nTaoJAs7C4tuWOgr$> @david-haver02862<https://urldefense.com/v3/__https://github.com/david-haver02862__;!!Mb91!MOCpJYYsi-_D-3tY5SiSYfRdsdkNIAIpbZK3DfKbiN0XLU8Qe5AkZmmJpiSdyu0bR2vwhtoUFVo9nTaoJAs7C3cztv0_$> Hi, can you find the Key Vault in the "Manage deleted vaults" overview? If so, you can try to purge it. image.png (view on web)<https://urldefense.com/v3/__https://github.com/user-attachments/assets/6dc22a96-4a92-451e-98dd-6f6b2af025e9__;!!Mb91!MOCpJYYsi-_D-3tY5SiSYfRdsdkNIAIpbZK3DfKbiN0XLU8Qe5AkZmmJpiSdyu0bR2vwhtoUFVo9nTaoJAs7C5xaTm-e$> — Reply to this email directly, view it on GitHub<https://urldefense.com/v3/__https://github.com/microsoft/azure_arc/issues/3265*issuecomment-3013912954__;Iw!!Mb91!MOCpJYYsi-_D-3tY5SiSYfRdsdkNIAIpbZK3DfKbiN0XLU8Qe5AkZmmJpiSdyu0bR2vwhtoUFVo9nTaoJAs7C4tuWOgr$>, or unsubscribe<https://urldefense.com/v3/__https://github.com/notifications/unsubscribe-auth/BHSYB3V5WQLZ3TVYKXWO5UL3FV7TJAVCNFSM6AAAAACAJJEY2GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTAMJTHEYTEOJVGQ__;!!Mb91!MOCpJYYsi-_D-3tY5SiSYfRdsdkNIAIpbZK3DfKbiN0XLU8Qe5AkZmmJpiSdyu0bR2vwhtoUFVo9nTaoJAs7C2H--gVB$>. You are receiving this because you were mentioned.Message ID: ***@***.***>

[janegilring]

I see, then we can look at exposing the Key Vault name as a parameter so it is possible to override the default generated name.

Until then, you can consider one of the following workarounds:

1. On line 74 in azure_jumpstart_arcbox\bicep\mgmt\mgmtArtifacts.bicep, specify another name to use for the Key Vault
2. Try using a different resource group name (the Key Vault name is generated based on the resource group id)

[david-haver02862]

When a deployment fails, I always delete the Resource group before trying again so the resource ID changes. Can you tell me what line it is in the JASON since I don't have the Bicep for it. David Haver (Day-vid Hay-ver) (Him,He) | Systems Engineering Architect Elephant Insurance Services, LLC | P.O. Box 5005 | Glen Allen, VA 23058 ***@***.******@***.***> Phone (804) 690-7669 elephant.com<https://www.elephant.com/> ***@***.***?anonymous&ep=bwmEmailSignature> Book time to meet with me<https://outlook.office.com/bookwithme/user/f9afae9ea81649ff87bbb16eebd7be3a%40elephant.com?anonymous>. My office hours are: M-F, 8AM - 5PM

…

________________________________ From: Jan Egil Ring ***@***.***> Sent: Friday, June 27, 2025 2:08 PM To: microsoft/azure_arc ***@***.***> Cc: David Haver ***@***.***>; Mention ***@***.***> Subject: Re: [microsoft/azure_arc] [Bug / Issue]: (Issue #3265) janegilring left a comment (microsoft/azure_arc#3265) I see, then we can look at exposing the Key Vault name as a parameter so it is possible to override the default generated name. Until then, you can consider one of the following workarounds:  [https://avatars.githubusercontent.com/u/2039662?s=20&v=4]janegilring left a comment (microsoft/azure_arc#3265)<https://urldefense.com/v3/__https://github.com/microsoft/azure_arc/issues/3265*issuecomment-3013973282__;Iw!!Mb91!KTJ-y499e8lwudzP9uAaryDCSMnxPO_Idx0F7E694uNupNOqMAv0dzWv4MKOXYxDd0T1__ncXi6WpkWGLQszqL0Fc-1v$> I see, then we can look at exposing the Key Vault name as a parameter so it is possible to override the default generated name. Until then, you can consider one of the following workarounds: 1. On line 74 in azure_jumpstart_arcbox\bicep\mgmt\mgmtArtifacts.bicep, specify another name to use for the Key Vault 2. Try using a different resource group name (the Key Vault name is generated based on the resource group id) — Reply to this email directly, view it on GitHub<https://urldefense.com/v3/__https://github.com/microsoft/azure_arc/issues/3265*issuecomment-3013973282__;Iw!!Mb91!KTJ-y499e8lwudzP9uAaryDCSMnxPO_Idx0F7E694uNupNOqMAv0dzWv4MKOXYxDd0T1__ncXi6WpkWGLQszqL0Fc-1v$>, or unsubscribe<https://urldefense.com/v3/__https://github.com/notifications/unsubscribe-auth/BHSYB3TOOJNBBPMO6TD7ZWT3FWCDTAVCNFSM6AAAAACAJJEY2GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTAMJTHE3TGMRYGI__;!!Mb91!KTJ-y499e8lwudzP9uAaryDCSMnxPO_Idx0F7E694uNupNOqMAv0dzWv4MKOXYxDd0T1__ncXi6WpkWGLQszqNp46SwF$>. You are receiving this because you were mentioned.Message ID: ***@***.***>

[janegilring]

I see, it is line 2366 in the ARM template.

Replace this:
"keyVaultName": "[toLower(format('{0}{1}', parameters('namingPrefix'), uniqueString(resourceGroup().id)))]",

With:
"keyVaultName": "your-desired-vault-name",