Monday, December 20, 2021

Key Vault Keys Should Have an Expiration Date

 Cryptographic keys should have a defined expiration date and not be permanent. Keys that are valid forever provide a potential attacker with more time to compromise the key. It is a recommended security practice to set expiration dates on cryptographic keys.

To enable this:

To enable an expiration date on your key:
1. Log in to the Azure portal and select your key vault.
2. Open the 'Keys' tab.
3. Find all keys in the table that do not have an expiration date.
4. Select a key.
5. Select the current version of the key.
6. Select the box corresponding to 'Set expiration date'.
7. Select 'Save'.

No comments:

Post a Comment