Azure Key Vault with CA API Gateway

[Anderson Porcel]

Do you know a way to use "Azure Key Vault" instead of "Manage Stored Passwords" in CA API Gateway?

The main idea is store some keys in a centralized place (AZ key vault), in order to share with other systems, and use in gateway assertions (eg Encode JWT > JWS > Secret ).

[Anderson Porcel]

Maybe implement in devops the feature do get key in Azure Key Vault and update the password in "Manage Stored Password" using GMU ... Is it possible? What do you think about?

[Leandro Dantas]

Hi.

I didn't work with Azure Key Vault yet but as far as I understand from Azure docs, it has a Rest API which you can use to build a policy to retrieve the value needed . 
https://docs.microsoft.com/en-us/rest/api/keyvault/  

And yes, you can use GMU restman command to manipulate the passoword store.
The restman documentation can be accessed from your gateway instance:
https://<gateway-server>/restman/1.0/doc/restDoc.html#1.0/passwords
Login with some administrator user from Policy Manager

------------------------------
Sr. Consultant Services
HCL Enterprise Studio
------------------------------