While configuring SFTP on an Azure Storage Account, I selected the “Use existing key stored in Azure Key Vault” option to authenticate a local user. However, the dropdown list for selecting the key remains empty, despite having an SSH public key stored in the Key Vault.
I’ve verified that:
The SSH public key is stored as a secret in the correct Key Vault.
The key is in valid OpenSSH format (e.g., ssh-rsa ...).
I'm not sure to check the necessary RBAC permissions on the Key Vault (Key Vault Secrets User role).
Could you please advise on any additional settings or requirements needed to populate the key selection dropdown?
Please refer to the attached screenshot for clarity:
Thank you!
Could you please advise on any additional settings or requirements needed to populate the key selection dropdown?
According to this MS-Document,
As far as I know, you can't authenticate with Azure Key Vault when creating an Azure SFTP local user.
First create SSH key from Azure portal through this MS-Document.
Once you've created the SSH key through the Azure portal, you will now be able to see the key under Use existing key stored in Azure
.
Portal: