The following shows you how to add and register an application using App registrations in the Azure portal and then how to generate a secret (password), needed when obtaining tokens.

Registering the App in Active Directory and Generating Secret

  1. Login and access your Azure portal at https://portal.azure.com.
  2. Select the Azure Active Directory service in the left-hand navigation pane, and then select App registrations > New registration.

  3. Specify an app name (that will be displayed to users of the app), for example "signserver-vault", and then click Register.
    Azure AD assigns a unique application (client) ID to your app and displays your application's Overview page.

  4. On the Overview page, make a note of the Application (client) ID. This value will be required in SignServer when creating a Crypto Token.
  5. Click Certificates & secrets to add a secret (password).
  6. Click New client secret in the Client secrets section.
  7. Enter a name for the secret, such as "signserver-vault-access". Set the expiration if desired. In this example, the expiration is set to Never expire to allow the CA to always have access to the keys in the HSM. Click Add once done.
  8. A secret is generated and displayed. Note this secret down in a password manager such as Last Pass as it will only be displayed once in the portal. The secret will also be required in SignServer when creating a Crypto Token in the later step Creating an Azure Key Vault Crypto Token in SignServer.

Next, continue with Creating the Azure Key Vault.