Add support for storage and retrieval of password protected certificates
Currently all password protections applied on a certificate are stripped when they are uploaded and saved into Azure Key Vault. We would like to have the option of storing both the certificate and the password via the "az keyvault certificate import/download" set of cli commands with a toggleable optional argument to choose to preserve the transmission of the private key into and out of the keyvault along with the base certificate data together.
Kuersten, Harald commented
As suggested in https://github.com/MicrosoftDocs/azure-docs/issues/64609
I would very much like to see this implemented.
We want to use KeyVault for our Cert Store, but this limitation is making that adoption difficult. Is there any plan to allow this?
Joe Petrakovich commented
This seems like a bug because the key is imported to key vault with the -Password flag but it doesn't seem to be being used. When I download the key and install it, the password that was on the certificate is stripped.