Azure / azure-cli

Azure Command-Line Interface
MIT License
3.94k stars 2.92k forks source link

CLI Endpoint Support for Managed HSM (Fix Bug with CLI Plain Text Keys) #29278

Open chen-karen opened 1 month ago

chen-karen commented 1 month ago

Describe the bug

Currently Managed HSM security domain Backup & Restore through CLI shows plain text keys. An update is needed to remove plain text keys for higher security.

Related command

az keyvault security-domain restore-blob --sd-exchange-key ContosoMHSM2-SDE.cer --sd-file ContosoMHSM-SD.json --sd-wrapping-keys cert_0.key cert_1.key cert_2.key --sd-file-restore-blob restore_blob.json

Errors

N/A

Issue script & Debug output

N/A

Expected behavior

N/A

Environment Summary

N/A

Additional context

Please contact Keith Prunella / MHSM team for any further details on what is required.

yonzhan commented 1 month ago

Thank you for opening this issue, we will look into it.

evelyn-ys commented 1 month ago

Thanks for reminding, we will announce the upcoming breaking change in next sprint and then remove the plain text keys in next breaking change window(which would be in Oct)