Key Vault | Topaz

Gets a key and its attestation information from an Azure Key Vault. For software-backed keys the attestation field is null, matching real Azure behaviour.

📄️keyvault key get

Gets a key from an Azure Key Vault (latest version or a specific version).

📄️keyvault key rotation-policy show

Gets the rotation policy for a key in an Azure Key Vault.

📄️keyvault key random-bytes

Generates random bytes using the Key Vault random number generator.

📄️keyvault key import

Imports an externally created key into an Azure Key Vault.

📄️keyvault key list

Lists all keys in an Azure Key Vault.

📄️keyvault key list-versions

Lists all versions of a key in an Azure Key Vault.

📄️keyvault key purge

Permanently deletes a soft-deleted key in an Azure Key Vault.

📄️keyvault key recover

Recovers a soft-deleted key from an Azure Key Vault.

📄️keyvault key release

Releases a key for Secure Key Release (SKR). Any non-empty attestation token is accepted by the emulator.

📄️keyvault key restore

Restores a key into an Azure Key Vault from a backup blob.

📄️keyvault key rotate

Rotates a key in an Azure Key Vault by creating a new version with fresh cryptographic material of the same type.

📄️keyvault key sign

Signs a pre-hashed digest using a Key Vault key (RSA ES256, ES384, ES512).

📄️keyvault key unwrap

Unwraps (decrypts) a wrapped key using a Key Vault key (RSA keys only: RSA1_5, RSA-OAEP, RSA-OAEP-256).

📄️keyvault key update

Updates the attributes of a key version in an Azure Key Vault.

📄️keyvault key rotation-policy update

Updates the rotation policy for a key in an Azure Key Vault.

📄️keyvault key verify

Verifies a signature against a pre-hashed digest using a Key Vault key (RSA ES256, ES384, ES512).

📄️keyvault key wrap

Wraps (encrypts) a key using a Key Vault key (RSA keys only: RSA1_5, RSA-OAEP, RSA-OAEP-256).