Setting up authentication to Microsoft Azure from Trust Protection Foundation

In order to connect to the Azure Key Vault without having to log in and present a certificate each time, you can create and enroll a certificate and create an associated credential for it. The data is then stored in Trust Protection Foundation and presented to the Azure Key Vault whenever you access it.

To create a credential object for authenticating with Azure Key Vault

1. In the Policy tree, create and enroll a certificate that you'll use to log in to the Azure Key Vault.

   If you're not sure how to do that, see Creating a new certificate.

2. Highlight the root Policy, then select Add > Credential > Certificate Credential.

   

3. Click Certificate Credential.
4. Under Certificate Credential, type the Credential Name, Description, and Contact(s).
5. Under Certificate Data, select Link to existing certificate, and then choose the certificate you created in Step 1.

On the Azure side, configure the certificate to be used by Trust Protection Foundation.

1. In Azure Navigate to the Application Registration and select Certificate & Secrets.

2. To upload your certificate, select Upload certificate.

Now the certificate can authenticate Trust Protection Foundation to Azure.