Key
has been renamed toKeyVaultKey
to avoid ambiguity with other libraries and to yield better search results.Key.KeyMaterial
has been renamed toKeyVaultKey.Key
.- The default
JsonWebKey
constructor has been removed. JsonWebKey
constructors now take an optional collection of key operations.JsonWebKey.KeyOps
is now read-only. You must pass a collection of key operations at construction time.Hsm
properties andhsm
parameters have been renamed toHardwareProtected
andhardwareProtected
respectively.- On the
KeyProperties
class,Expires
,Created
, andUpdated
have been renamed toExpiresOn
,CreatedOn
, andUpdatedOn
respectively. - On the
DeletedKey
class,DeletedDate
has been renamed toDeletedOn
. KeyClient.GetKeys
andKeyClient.GetKeyVersions
have been renamed toKeyClient.GetPropertiesOfKeys
andKeyClient.GetPropertiesOfKeyVersions
respectively.KeyClient.RestoreKey
has been renamed toKeyClient.RestoreKeyBackup
to better associate it withKeyClient.BackupKey
.KeyClient.DeleteKey
has been renamed toKeyClient.StartDeleteKey
and now returns aDeleteKeyOperation
to track this long-running operation.KeyClient.RecoverDeletedKey
has been renamed toKeyClient.StartRecoverDeletedKey
and now returns aRecoverDeletedKeyOperation
to track this long-running operation.KeyCreateOptions
has been renamed toCreateKeyOptions
.KeyImportOptions
has been renamed toImportKeyOptions
.EcCreateKeyOptions
has been renamed toCreateEcKeyOptions
.CreateEcKeyOptions.Curve
has been renamed toCurveName
to be consistent across the library.- The
curveName
optional parameter has been removed from theCreateEcKeyOptions
constructor. Set it using theCurveName
property instead. RsaKeyCreateOptions
has been renamed toCreateRsaKeyOptions
.- The
keySize
optional parameter has been removed from theCreateRsaKeyOptions
constructor. Set it using theKeySize
property instead.
- Updated to work with the 1.0.0 release versions of Azure.Core and Azure.Identity.
JsonWebKey.KeyType
andJsonWebKey.KeyOps
have been exposed asKeyVaultKey.KeyType
andKeyVaultKey.KeyOperations
respectively.KeyModelFactory
added to create mocks of model types for testing.CryptographyModeFactory
added to create mocks of model types for testing.- Added ETW trace logger "Azure-Security-KeyVault-Keys" with provider ID "{657a121e-762e-50da-b233-05d7cdb24eb8}"
for cases in
CryptographyClient
when the availableKeyVaultKey
cannot be used for an operation and the service will perform the operation instead.
KeyType
enumeration values have been changed to match other languages, e.g.KeyType.EllipticCurve
is nowKeyType.Ec
.KeyOperations
has been renamedKeyOperation
.- Enumerations including
KeyCurveName
,KeyOperation
, andKeyType
are now structures that define well-known, supported static fields. KeyBase
has been renamed toKeyProperties
.Key
andDeletedKey
no longer extendKeyProperties
, but instead contain aKeyProperties
property namedProperties
.KeyClient.UpdateKey
has been renamed toKeyClient.UpdateKeyProperties
.
KeyClient.UpdateKey
andKeyClient.UpdateKeyAsync
now allow thekeyOperations
parameter to be null, resulting in no changes to the allowed key operations.RSA
andECDsa
support have been implemented forCryptographyClient
to use locally if key operations and key material allow; otherwise, operations will be performed in Azure Key Vault.
Version 4.0.0-preview.1 is the first preview of our efforts to create a user-friendly client library for Azure Key Vault. For more information about preview releases of other Azure SDK libraries, please visit https://aka.ms/azure-sdk-preview1-net.
This library is not a direct replacement for Microsoft.Azure.KeyVault
. Applications
using that library would require code changes to use Azure.Security.KeyVault.Keys
.
This package's
documentation
and
samples
demonstrate the new API.
- Packages scoped by functionality
Azure.Security.KeyVault.Keys
contains a client for key operations.Azure.Security.KeyVault.Secrets
contains a client for secret operations.
- Client instances are scoped to vaults (an instance interacts with one vault only).
- Asynchronous and synchronous APIs in the
Azure.Security.KeyVault.Keys
package. - Authentication using
Azure.Identity
credentials- see this package's documentation , and the Azure Identity documentation for more information
- Certificate management APIs
- Cryptographic operations, e.g. sign, un/wrap, verify, en- and decrypt
- National cloud support. This release supports public global cloud vaults,
e.g.
https://{vault-name}.vault.azure.net