Azure Key Vault integration guide
Link your Microsoft Azure Key Vault account to your CertCentral account
Do you have a Microsoft Key Vault account? Using the CertCentral REST API, you can connect it to your CertCentral account. Doing this enables you to order DigiCert SSL/TLS certificates directly from your Key Vault account. Certificates are automatically renewed, making sure lapses in SSL/TLS security don't happen.
The DigiCert CertCentral Azure Key Vault integration also allows you to store your SSL/TLS certificates and their private keys in your Azure Key Vault account.
Before you begin
Before you start, make sure these prerequisites are met:
Azure Key Vault account—your account includes the key vault for storing keys, passwords, etc. (get a Key Vault account).
CertCentral account*—your account is specifically set up for linking with your Azure Key Vault account (get your CertCentral account).
You have administrator level permissions in your accounts.
Notice
*Already have a CertCentral account? We can help you manage your account for Key Vault integration. Contact your account manager or Support.
Connect your accounts
STEP 1: Create API Key
In your CertCentral account, create an API key. You use this key to link your Azure Key Vault account to your CertCentral account. See Generate an API key.
STEP 2: Gather additional information
Along with the API Key, you need two more items from your CertCentral account:
Account ID
Organization ID
Both IDs are included in the "CertCentral Signup - Azure - Account" email that DigiCert sends you once we've activated your CertCentral account. You can access this information from your account.
Account ID
In your CertCentral account, in the top right corner, in the “Company Name” dropdown, you'll find your Account ID. Record your account ID for use in your Key Vault account.
Organization ID
In your CertCentral account, in the left main menu, go to Certificates > Organizations.
On the Organizations page, click the organization's link.
On the Organization details page, next to Org ID, you'll find your organization's ID.
Record the organization ID for use in your Key Vault account.
STEP 3: Set up account credit payment method in CertCentral
Azure Key Vault requires you to use account credit as the payment method.
To order SSL/TLS certificates from your Azure Key Vault account, you must use account credit to pay for these certificates. The Azure Key Vault Module doesn't support credit cards as a payment method.
Add a credit card to your account to make depositing funds easier.
We recommend adding a credit card to your account. Having a credit card associated with your account helps you quickly and easily deposit funds for Key Vault certificate orders.
STEP 4: Order SSL/TLS certificates from your Microsoft Azure Key Vault account
Before you order a DigiCert SSL/TLS certificate from your Key Vault account, make sure account credit is the default payment method for your CertCentral account.
Also, make sure you have this information handy:
CertCentral API key
CertCentral account ID
Organization ID
You need this information to run the PowerShell commands for ordering your DigiCert SSL/TLS Certificates.