@@ -116,21 +116,22 @@ function Create-KeyVault
116
116
$vault = New-AzureRmKeyVault - VaultName $vaultName - ResourceGroupName $resourceGroupName - Location $location - Sku standard
117
117
$vault = Get-AzureRmKeyVault - VaultName $vaultName - ResourceGroupName $resourceGroupName
118
118
119
- # create access policy
120
- $servicePrincipalName = (get-azurermcontext ).Account.Id
121
- Set-AzureRmKeyVaultAccessPolicy - VaultName $vaultName - ResourceGroupName $resourceGroupName - ServicePrincipalName $servicePrincipalName - PermissionsToKeys create
119
+ # create access policy
120
+ $servicePrincipalName = (Get-AzureRmContext ).Account.Id
121
+ Assert-NotNull $servicePrincipalName
122
+ # Set-AzureRmKeyVaultAccessPolicy -VaultName $vaultName -ResourceGroupName $resourceGroupName -ServicePrincipalName $servicePrincipalName -PermissionsToKeys Create
122
123
Set-AzureRmKeyVaultAccessPolicy - VaultName $vaultName - ResourceGroupName $resourceGroupName - EnabledForDiskEncryption - EnabledForDeployment - EnabledForTemplateDeployment
123
124
124
125
# create key encryption key
125
- $kekName = ' kek' + $resourceGroupName
126
- $kek = Add-AzureKeyVaultKey - VaultName $vaultName - Name $kekName - Destination " Software"
126
+ # $kekName = 'kek' + $resourceGroupName
127
+ # $kek = Add-AzureKeyVaultKey -VaultName $vaultName -Name $kekName -Destination "Software"
127
128
128
129
# return the newly created key vault properties
129
130
$properties = New-Object PSObject - Property @ {
130
131
DiskEncryptionKeyVaultId = $vault.ResourceId
131
132
DiskEncryptionKeyVaultUrl = $vault.VaultUri
132
- KeyEncryptionKeyVaultId = $vault.ResourceId
133
- KeyEncryptionKeyUrl = $kek.Key.kid
133
+ # KeyEncryptionKeyVaultId = $vault.ResourceId
134
+ # KeyEncryptionKeyUrl = $kek.Key.kid
134
135
}
135
136
return $properties
136
137
}
0 commit comments