News for hackers. Stuff that matters.

A comment on Ask HN: How does your company manage its encryption keys?.

Re:Ask HN: How does your company manage its encryption keys? by MangoCoffee on Tuesday June 02, 2020 @10:37AM (#23391453)
We use Azure KeyVault
[ Parent | on HN ]
Re:Ask HN: How does your company manage its encryption keys? by maxbaines on Tuesday June 02, 2020 @11:44AM (#23392277)
+1

Worth noting accessible using api via REST https://docs.microsoft.com/en-us/rest/api/keyvault/

and powershell https://docs.microsoft.com/en-us/azure/key-vault/secrets/qui...

[ Parent | on HN ]
Re:Ask HN: How does your company manage its encryption keys? by idatum on Tuesday June 02, 2020 @02:26PM (#23394280)
+1 for Az KeyVault. I use it in my Docker deployment scripts using Azure CLI. Example here is a secret, but similar concept for certs using CLI: STORAGE_ACCOUNT_KEY=`az keyvault secret show --vault-name=<your keyvault> --name=<secret name> --query=value | tr -d "\""` This populates a .env file, referenced in Docker-compose.yml.
[ Parent | on HN ]
Re:Ask HN: How does your company manage its encryption keys? by maxbaines on Tuesday June 02, 2020 @11:47AM (#23392320)
I also use this for my passwords https://news.ycombinator.com/item?id=22316520
[ Parent | on HN ]
Re:Ask HN: How does your company manage its encryption keys? by Shicholas on Tuesday June 02, 2020 @05:50PM (#23396773)
+1, the integration to supplant K8 secrets is very nice.
[ Parent | on HN ]
Re:Ask HN: How does your company manage its encryption keys? by greener_fields on Tuesday June 02, 2020 @10:51AM (#23391629)
+1
[ Parent | on HN ]