Breadcrumbs

Importing on Windows

Use the Azure CLI to import the wrapped key to your Azure key vault, generated in the previous steps.

  1. Execute the following command to import an RSA tenant key:

›_ Console

> az keyvault key import --vault-name <keyvault> --name <WrappedKeyName> -- byok-file "<wrappedkey>"
image-20260629-174223.png


Importing tenant key

Execute the following command to import an EC tenant key:

›_ Console

> az keyvault key import --vault-name <keyvault> --name <WrappedKeyName> -- byok-file "<wrappedkey>" --kty EC --curve <curvename>

For <curvename> Azure supports P-256, P-384 and P-521. The curve name must match the actual key.

image-20260630-035008.png


Importing tenant key

image-20260629-174539.png

List importing tenant key

  1. Use the following command to check if the key has been successfully imported to the Azure Key vault:

›_ Console

> az keyvault key show --vault-name <keyvault> --name <WrappedKeyName>

You can also check if the key is visible on your Azure portal.

For the RSA Key

image-20260629-174647.png


List RSA key

For the ECC Key

image-20260629-174624.png


List ECC key