PowerShell 7 在 Linux 上，使用证书对 Azure 进行身份验证

Question

I am not that experienced with Linux, so bear with me:-) I am beginning to use the VSC Remote Development extension to connect to a Azure based Linux VM for PowerShell scripting purposes - works like a charm.

But I would like to have some easy way of handling certificates, using to authenticate connections to Azure Resource Manager (using Connect-AzAccount and a SPN in Azure AD).

I consider using the Azure KeyVault for Linux extension, which handle the cerificate distribution nicely. On windows, the certificates end up in the personal certificate store and are directly usable. On Linux however, they end up in /var/lib/.. as PEM files. So how do I get them "usable" in the easiest possible way..?

Thanks in advance for suggestions and ideas \Jesper

Answer 1

Yes, the Key Vault virtual machine extension for Linux is an easy way to go. The VM extension would require system or user-managed identity to be assigned to authenticate to the Key Vault. See How to authenticate to Key Vault and assign a Key Vault access policy . You can use this identity to authenticate to any service that supports Azure AD authentication, without having credentials in your code.

Your observed certificate URLs should be of the form https://myVaultName.vault.azure.net/secrets/myCertName .