Setup & Installation
npx skills add https://github.com/microsoft/skills --skill azure-security-keyvault-keys-dotnet
https://github.com/microsoft/skills/tree/main/.github/plugins/azure-sdk-dotnet/skills/azure-security-keyvault-keys-dotnet
View on GitHubWhat This Skill Does
Azure.Security.KeyVault.Keys is the .NET client library for creating and managing cryptographic keys in Azure Key Vault and Managed HSM. It provides two main clients: KeyClient for key lifecycle operations and CryptographyClient for encrypt, decrypt, sign, verify, wrap, and unwrap operations.
KeyVault handles HSM-backed key storage and cryptographic operations server-side, so private key material never touches application memory.
When to use it
- Rotating RSA keys on a 90-day schedule with automatic Key Vault policies
- Encrypting AES session keys with RSA-OAEP before storing them in a database
- Signing JWTs or payloads with EC keys backed by a Managed HSM
- Wrapping data encryption keys so plaintext key material never leaves the vault
- Listing all key versions to audit which version is active in production