CmdID / az / az keyvault
az keyvault key
Manage keys. Azure CLI reference
19 commands 1 option Its page in the Azure CLI reference
Commands
backupRequest that a backup of the specified key be downloaded to the client.createCreate a new key, stores it, then returns key parameters and attributes to the client.decryptDecrypt a single block of encrypted data.deleteDelete a key of any type from storage in Vault or HSM.downloadDownload the public part of a stored key.encryptEncrypt an arbitrary sequence of bytes using an encryption key that is stored in a Vault or HSM.get-attestationGet a key's attestation blob.get-policy-templateReturn policy template as JSON encoded policy definition.listList keys in the specified Vault or HSM.list-deletedList the deleted keys in the specified Vault or HSM.purgePermanently delete the specified key.recoverRecover the deleted key to its latest version.restoreRestore a backed up key to a Vault or HSM.rotateRotate the key based on the key policy by generating a new version of the key.rotation-policyManage key's rotation policy.set-attributesThe update key operation changes specified attributes of a stored key and can be applied to any key type and key version stored in Vault or HSM.show-deletedGet the public part of a deleted key.signCreate a signature from a digest using a key that is stored in a Vault or HSM.verifyVerify a signature using the key that is stored in a Vault or HSM.Options
--opsSpace-separated list of permitted JSON web key operations.