Skip to main content

keyvault key unwrap

Unwraps (decrypts) a wrapped key using a Key Vault key (RSA keys only: RSA1_5, RSA-OAEP, RSA-OAEP-256).

Options​

  • --vault-name - (Required) (Required) Key Vault name.
  • -n, --name - (Required) (Required) Key name.
  • --version - (Required) (Required) Key version.
  • -a, --algorithm - (Required) (Required) Unwrap algorithm. Supported: RSA1_5, RSA-OAEP, RSA-OAEP-256.
  • --value - (Required) (Required) Base64url-encoded wrapped key material to unwrap.
  • -g, --resource-group - (Required) (Required) Resource group name.
  • -s, --subscription-id - (Required) (Required) Subscription ID.

Examples​

Unwrap with RSA-OAEP-256​

$ topaz keyvault key unwrap --vault-name "kvlocal" --name "my-key" --version "abc123" --algorithm "RSA-OAEP-256" --value "<wrapped-base64url>" --resource-group "rg-local" --subscription-id "36a28ebb-9370-46d8-981c-84efe02048ae"
Star on GitHub