Azure / azure-sdk-for-js

This repository is for active development of the Azure SDK for JavaScript (NodeJS & Browser). For consumers of the SDK we recommend visiting our public developer docs at https://docs.microsoft.com/javascript/azure/ or our versioned developer docs at https://azure.github.io/azure-sdk-for-js.
MIT License
2.07k stars 1.19k forks source link

Update KeyVault Keys and Administration READMEs for MHSM #11182

Closed christothes closed 3 years ago

christothes commented 4 years ago

MHSM has a few different requirements for provisioning, such as downloading the security domain using the CLI before it is usable. Update the README with these details in Getting Started.

This applies to both Keys and Administration clients. Getting Started details can be found here

The security domain must be downloaded before the MHSM can be used - see this and this

These CLI versions do not go live until 9/22

ramya-rao-a commented 4 years ago

@christothes, Can you provide more details as to which readme (admin vs keys) needs the update and pointers to what exactly needs to be updated?

sadasant commented 4 years ago

The .Net readme for Key Vault Admin has some interesting tidbits: https://github.com/Azure/azure-sdk-for-net/blob/master/sdk/keyvault/Azure.Security.KeyVault.Administration/README.md

Azure Key Vault Managed HSM is a fully-managed, highly-available, single-tenant, standards-compliant cloud service that enables you to safeguard cryptographic keys for your cloud applications using FIPS 140-2 Level 3 validated HSMs.

Create the Managed HSM and grant the above mentioned application authorization to perform administrative operations on the Managed HSM (replace and with your own, unique names and with the value from above)

The Activate your managed HSM section seems useful too.

Considering I should run these commands and understand what I'm adding to these readmes, I believe this update will take me up to a day of work.

sadasant commented 3 years ago

We can safely push this to March (but not later).