Legacy Update: Get back online, activate, and install updates on your legacy Windows PC

BYOK preparation tools for Microsoft Azure Key Vault

• This toolset accompanies the Microsoft Azure Key Vault service. Learn more about Microsoft Azure Key Vault service.
  
  Azure subscribers can upload keys from an HSM (Hardware Security Module) that they own to HSMs in the Azure Key Vault service. This toolset is designed so that your key is always protected by HSMs, even during transport. This feature is called "bring your own key", or BYOK. The toolset on this page prepares your key for BYOK.
  
  The Azure Key Vault service is cryptographically isolated in each Azure geography (North America, Europe, Asia, Japan, Brazil, Australia). You upload your keys to a specific Azure region in a specific geography.
  
  

Files

Status: Deleted This download is no longer available on microsoft.com. The downloads below are archives provided by the Internet Archive Wayback Machine from the Microsoft Download Center prior to August 2020.

File	Size
KeyVault-BYOK-Tools-AsiaPacific.zip SHA1: baff0d05dfb58d8130033cce0e972f31c9e7741e	7.19 MB
KeyVault-BYOK-Tools-Australia.zip SHA1: 80b5d8d9835a8b2ae1a857303c81720a2b9a7ddc	7.19 MB
KeyVault-BYOK-Tools-Canada.zip SHA1: 0af7aa5874870429675fb00e487f1336f03c99b6	7.19 MB
KeyVault-BYOK-Tools-Europe.zip SHA1: b8aab7ffc948143addc9ca1d608274abccc84633	7.19 MB
KeyVault-BYOK-Tools-France.zip SHA1: c22d49e1074735db6005c411067cc356d085bd9c	7.19 MB
KeyVault-BYOK-Tools-Germany-Public.zip SHA1: 1c5bfcc9aeee2d480ef2ad25797863fe188f426d	7.19 MB
KeyVault-BYOK-Tools-Germany.zip SHA1: b13827cc17ba90313283bae50e9d42927825be72	7.19 MB
KeyVault-BYOK-Tools-India.zip SHA1: 9dee0987aa7c9d50570263c0947ae4bfb1a2da1e	7.19 MB
KeyVault-BYOK-Tools-Japan.zip SHA1: ca5139355e96601b98302d9c4628c23902e75650	7.19 MB
KeyVault-BYOK-Tools-Korea.zip SHA1: ccce5c232511ee824a628604613174f3c82fb39a	7.19 MB
KeyVault-BYOK-Tools-LatinAmerica.zip SHA1: 0f6c58f64c31124a5fb4cedf6d088554b414552a	7.19 MB
KeyVault-BYOK-Tools-SouthAfrica.zip SHA1: 08e024d14047ba4114daa31ae74bb8bd833b35e1	7.19 MB
KeyVault-BYOK-Tools-Switzerland.zip SHA1: 96ec4fdc930b398645d16ec0e8e2c11658362567	7.19 MB
KeyVault-BYOK-Tools-UAE.zip SHA1: 978465298d79511bb0cb343504366b7d5444453c	7.19 MB
KeyVault-BYOK-Tools-UnitedKingdom.zip
KeyVault-BYOK-Tools-UnitedStates.zip SHA1: 9da4bd6aaec31e6e1f8c0a7ca8e055b00444cdb7	7.19 MB
KeyVault-BYOK-Tools-USGovernment.zip SHA1: 299ef0a7ba09facc0b9994237eef0aefa825ca25	7.19 MB
KeyVault-BYOK-Tools-USGovernmentDoD.zip SHA1: 0b75955286dd5daf5eb16c7ed9d325acf5925d0f	7.19 MB

• Workstation running
  • Windows 8 or higher.
  • .Net Framework 4.5.
  • Thales nShield software version 11.61 or higher.
  Thales nShield HSM (nShield Solo, or nShield Edge, or nShield Connect) with
  • Thales nShield firmware version 2.50.16 or higher.

• 1. For each Azure region that you want to upload your key to, determine the geography that contains that Azure region, using this site.
  2. Download the BYOK zip package corresponding to that geo. For United States, download the zip file KeyVault-BYOK-Tools-UnitedStates. For Europe download the zip file KeyVault-BYOK-Tools-Europe. For Asia Pacific, download the zip file KeyVault-BYOK-Tools-AsiaPacific. For Japan download the zip file KeyVault-BYOK-Tools-Japan.zip. For Brazil download the zip file KeyVault-BYOK-Tools-LatinAmerica.zip. For Australia download the zip file KeyVault-BYOK-Tools-Australia.zip. For India download the zip file KeyVault-BYOK-Tools-India.zip. For Canada download the zip file KeyVault-BYOK-Tools-Canada.zip. For Germany download the zip file KeyVault-BYOK-Tools-Germany.zip. The BYOK feature is currently not available for other geos.
  3. Follow the step-by-step instructions to prepare your key.