Managing Azure Vaults

This section describes how to manage Azure vaults on CCKM.

Before proceeding, make sure to fulfill prerequisites.

Adding Existing Vaults

To add an existing Azure vault to the CCKM:

1. Log on to the CipherTrust Manager GUI as administrator.

2. Open the Cloud Key Manager application.

3. In the left pane, click Containers > Azure Key Vaults. The Vaults tab of the Azure Key Vaults page is displayed.

4. Click Add Existing Vault. The Add Existing Key Vaults dialog box is displayed.

5. Select/enter the following details:

   1. From the Azure Connection drop-down list, select the desired connection.

   2. From the Subscription drop-down list, select the desired subscription.

   3. Select the vaults that you want to add to the CCKM. Use the Vault Name check box to select vaults.

6. Click Save. The Azure vault is added to the CCKM.

A message vault added successfully... is displayed on the screen.

Refreshing Azure Keys

Refreshing is the process of downloading keys created on the Azure vaults to CCKM. You can refresh keys from individual vaults or all vaults at once.

• Refreshing Specific Vaults

• Refreshing All Vaults

Refreshing Specific Vaults

To refresh keys of a specific vault:

1. Open the Cloud Key Manager application.

2. In the left pane, click Containers > Azure Key Vaults. The Vaults tab of the Azure Key Vaults page is displayed. This tab displays the list of Azure key vaults.

3. Click the overflow icon () corresponding to the desired Azure vault and click Refresh Now.

A message Refresh started... is displayed on the screen.

After successful refresh, the refreshed keys are listed on the Cloud Keys > Azure > Azure Keys page. Refer to Viewing Azure Keys for details.

Refreshing All Vaults

To refresh keys of all vaults:

1. Open the Cloud Key Manager application.

2. In the left pane, click Containers > Azure Key Vaults. The Vaults tab of the Azure Key Vaults page is displayed. This tab displays the list of Azure key vaults.

3. Click Refresh All. The This may take a while... message is displayed.

   Note

   Refresh all Azure Key Vaults is a time intensive operation that could take several hours or days to complete. It will continue running in the background. Do you want to continue?

4. Click Refresh All to continue.

A message Refresh started... is displayed on the screen. To cancel the refresh, click Cancel Refresh.

After successful refresh, the refreshed keys are listed on the Cloud Keys > Azure > Azure Keys page. Refer to Viewing Azure Keys for details.

Viewing/Editing Details of Azure Vaults

Viewing Azure Vaults Details

The Vaults tab of the Azure Key Vaults page shows the list of existing Azure key vaults. Search for the key vaults by Vault Name, Subscription ID, or Subscription Name.

To view the details of Azure vaults:

1. Open the Cloud Key Manager application.

2. In the left pane, click Containers > Azure Key Vaults. The Vaults tab of the Azure Key Vaults page displays the following details.

   Column	Description
   Name	Name of the Azure vault.
   Last Refreshed	Time when the vault was last refreshed.
   Connection	Name of the connection.
   Cloud	Cloud name.
   Location	Location in which the vault is added.
   Sku	Pricing Tier information of the vault.
   Subscription Name	Name of the subscription.
   Subscription ID	ID of the subscription.
   Vault URI	URI of the Azure vault. By default, this column is not visible. Click the Customize View () icon, select Vault URI, and click OK to display the column.

Modifying Azure Vault Details

To edit the details of an Azure vault:

1. Open the Cloud Key Manager application.

2. In the left pane, click Containers > Azure Key Vaults. The Vaults tab of the Azure Key Vaults page displays the list of added Azure vaults.

3. Click the overflow icon () corresponding to the desired Azure vault and click View/Edit Details.

   You can modify user permission on the Azure vault. Refer to Managing User Permissions on Azure Vaults for details.

Managing User Permissions on Azure Vaults

To work with the Azure, users/ group must have the minimum set of permissions that allow them to use the Azure resources such as keys and Azure vaults. Initially, the user only has permission to view the keys. However, if required, the CCKM administrator can grant and revoke permissions.

To add permission for user/group:

1. In the Vault Access Control section, click Assign User/Group.

2. On the Assign User/Group screen, select the user or group to be assigned permissions from the User/Group drop-down list.

3. Click Save.

The newly added user/ group is displayed under Name in the Vault Access Control section.

CCKM allows the following operations on the Azure vaults:

• View Keys, Add Key, Upload Key, Edit Key

• Recover Key, Restore Key

• Soft Delete Key, Delete Key Backup

• Purge Key, Refresh Key

Granting Permission to Perform an Operation

To grant permissions to the user or group to perform any of the above mentioned operations:

1. Select the check box under the desired operation corresponding to the desired users or groups.

2. Click Update.

A success message is displayed on the screen.

Removing a Permission

To remove a permission assigned to a user or group:

1. Clear the check box under the desired operation corresponding to the desired users or groups.

2. Click Update.

A success message is displayed on the screen.

Removing Permission from a User/Group

To remove current permissions assigned to the user/group:

1. Under Unassign, click the X button corresponding to the desired user/group.

2. On the Unassign User / Unassign Group screen, click Unassign.

   Note

   Unassigning this user/group will remove all permissions currently assigned to the user/group. Are you sure you want to continue?

3. Click Unassign.

A message Updated access control for this key vault is displayed on the screen.

Deleting Azure Key Vaults

To delete an Azure key vault:

1. Open the Cloud Key Manager application.

2. In the left pane, click Containers > Azure Key Vaults. The Vaults tab of the Azure Key Vaults page displays the list of added Azure vaults.

3. Click the overflow icon () corresponding to the desired Azure vault and click Delete.

4. On the Delete Azure Key Vault screen, select Delete Azure Key Vault.

A message Azure Vault deleted is displayed on the screen.