To be used as an Orchestrator credential store, Azure Key Vault must be enabled in web.config.

Prerequisites

• The Key Vault plugin is set in your Orchestrator web.config file as described here.
• Create the Key Vault to be used with Orchestrator in your Azure account. See Microsoft's official documentation here for details.

🚧

Important!

The Key Vault plugin is already enabled in all Cloud Platform-based Orchestrator services. You only need to create the Key Vault in your own Azure account.

Configuration

1. Enable the Key Vault plugin as described here.
2. In the ClientId field, enter the client ID of your Azure account where the vault was created.
3. In the CertificateThumbprint field, enter the thumbprint of the security certificate of your Key Vault. See here for more details about Azure services certificates.
4. Click Update to save your changes. Key Vault credential stores can now be created.