Skip Navigation

Create Key Vault

Last updated: 10/23/2017

This template creates a Key Vault and creates secrets within the vault as passed along with the parameters

This Azure Resource Manager template was created by a member of the community and not by Microsoft. Each Resource Manager template is licensed to you under a license agreement by its owner, not Microsoft. Microsoft is not responsible for Resource Manager templates provided and licensed by community members and does not screen for security, compatibility, or performance. Community Resource Manager templates are not supported under any Microsoft support program or service, and are made available AS IS without warranty of any kind.


Parameter Name Description
keyVaultName Name of the Key Vault
tenantId Tenant Id for the subscription and use assigned access to the vault. Available from the Get-AzureRMSubscription PowerShell cmdlet
accessPolicies Access policies object {"tenantId":"","objectId":"","permissions":{"keys":[""],"secrets":[""]}}
vaultSku SKU for the vault
enabledForDeployment Specifies if the vault is enabled for VM or Service Fabric deployment
enabledForTemplateDeployment Specifies if the vault is enabled for ARM template deployment
enableVaultForVolumeEncryption Specifies if the vault is enabled for volume encryption
secretsObject all secrets {"secretName":"","secretValue":""} wrapped in a secure object
location Location for all resources.

Use the template


New-AzureRmResourceGroupDeployment -Name <deployment-name> -ResourceGroupName <resource-group-name> -TemplateUri
Install and configure Azure PowerShell

Command line

azure config mode arm
azure group deployment create <my-resource-group> <my-deployment-name> --template-uri
Install and Configure the Azure Cross-Platform Command-Line Interface