Strata Copilot
    Next-Gen Trust Security
    : Create a Microsoft Azure Private Key Vault machine
    Focus
    Focus
    1. Home
    2. Next‑Gen Trust Security
    3. Next-Gen Trust Security
    4. Next-Gen Trust Security overview
    5. Welcome to installations
    6. About machines
    7. Create a new machine
    8. Create a Microsoft Azure Private Key Vault machine

    Next-Gen Trust Security

    Create a Microsoft Azure Private Key Vault machine

    Table of Contents

    Create a Microsoft Azure Private Key Vault machine

    Creating a machine enables Next-Gen Trust Security to connect directly to an Azure Key Vault so certificates can be provisioned and managed. After creating the machine, you can provision certificates to it.

    Before you begin

    • Azure Tenant ID
    • Azure Client ID
    • Azure Client secret
    • Key Vault name
    • Credentials with sufficient permissions to manage certificates in the target Azure Key Vault
    1. Enter the Tenant ID.
    2. Enter the Client ID.
    3. Enter the Client Secret.
      Info:
      • Tenant ID identifies the Azure Active Directory instance.
      • Client ID identifies the application used to access Azure services.
      • Client secret is used to authenticate the application.
    4. Enter the Key Vault Name.
      Note: Next-Gen Trust Security uses the Key Vault name to construct the Key Vault URL automatically.
    5. Click Test Access to verify connectivity.
    6. Click Continue. The Continue button is enabled only after the connection test succeeds.

    What's next?

    © 2026 Palo Alto Networks, Inc. All rights reserved.