Azure Key Vault Features

Logs and stores multiple copies and versions of master keys.

Implements a key hierarchy with a local data encryption key (DEK) and a key encryption key (KEK).

Allows administrative control over automated tasks related to key management, storage and distribution.

Automatic discovery of certificates directly from Certificate Authorities, network scanning, and deep discovery methods.

Monitors and notifies administrators of certificate expiration dates.

Automates certificate deployment, renewals, and revocations.

Offers granular permissions for assigning certificate owners and other roles.

Offers built-in workflows to assign ownership and management of certificates.

Offers industry-standard protocols such as CMP, ACME, and SCEP.

Offers template and custom reports and search functionality.

Enforces certificate policies and provides audit trails of user and certificate activities to detect issues.

Allows keys to be stored on end devices, on the platform, or hardware security modules.

Creates audit trail of secrets lifecycle

Has a centralized dashboard for users to interact with

Offers a universal approach to secrets management with integrations to centralize secrets regardless of platform

Documents access and alterations of the database for analytics and reporting.

Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.

Provides Administration tools/console that are easy to use and learn for routine maintenance tasks.

Integrates with third-party software to provide other features and expand functionality.

Integrates with major cloud service provider offerings for simplified management and distribution.

Supports key distribution across multi-regions to increase availability.

Expands functionality while maintaining balanced loads. Serves growing demand without reducing functionality.