Skip to main content

Microsoft Azure Key Vault Client Library for Python

Project description

Microsoft Azure SDK for Python

This is the Microsoft Azure Key Vault Client Library.

This package has been tested with Python 2.7, 3.4, 3.5 and 3.6.

For a more complete set of Azure libraries, see the azure bundle package.


IMPORTANT: If you have an earlier version of the azure package (version < 1.0), you should uninstall it before installing this package.

You can check the version using pip:

pip freeze

If you see azure==0.11.0 (or any version below 1.0), uninstall it first:

pip uninstall azure


For code examples, see Key Vault on

Provide Feedback

If you encounter any bugs or have suggestions, please file an issue in the Issues section of the project.

Release History

1.1.0 (2018-08-07)

  • Adding support for multi-api and API profiles

1.0.0 (2018-06-27)

  • Moving azure-keyvault to stable API version 7.0
  • Adding support for EC certificate create and import
  • Renaming curve SECP256K1 and algorithm ECDSA256 to P-256K and ES256K respectively

1.0.0b1 (2018-04-10)

  • Upgraded to autorest 3.0 generated code

General Breaking changes

This version uses a next-generation code generator that might introduce breaking changes.

  • Model signatures now use only keyword-argument syntax. All positional arguments must be re-written as keyword-arguments. To keep auto-completion in most cases, models are now generated for Python 2 and Python 3. Python 3 uses the “*” syntax for keyword-only arguments.
  • Enum types now use the “str” mixin (class AzureEnum(str, Enum)) to improve the behavior when unrecognized enum values are encountered. While this is not a breaking change, the distinctions are important, and are documented here: At a glance:
    • “is” should not be used at all.
    • “format” will return the string value, where “%s” string formatting will return NameOfEnum.stringvalue. Format syntax should be prefered.
  • New Long Running Operation:
    • Return type changes from msrestazure.azure_operation.AzureOperationPoller to msrest.polling.LROPoller. External API is the same.
    • Return type is now always a msrest.polling.LROPoller, regardless of the optional parameters used.
    • The behavior has changed when using raw=True. Instead of returning the initial call result as ClientRawResponse, without polling, now this returns an LROPoller. After polling, the final resource will be returned as a ClientRawResponse.
    • New polling parameter. The default behavior is Polling=True which will poll using ARM algorithm. When Polling=False, the response of the initial call will be returned without polling.
    • polling parameter accepts instances of subclasses of msrest.polling.PollingMethod.
    • add_done_callback will no longer raise if called after polling is finished, but will instead execute the callback right away.

1.0.0a2 (2018-03-28)

  • Upgrading to API version 7.0-preview
  • Adding elliptic curve key support
  • Adding managed storage account key backup, restore and soft delete support
  • Breaking update to managed storage account SasDefinition creation
  • Adding certificate backup and restore support
  • Adding certificate transparency

1.0.0a1 (2018-01-25)

  • Added message encryption support for message encryption enabled vaults

0.3.7 (2017-09-22)

0.3.6 (2017-08-16)

  • Updated KeyVaultClient to accept both KeyVaultAuthentication and azure.common.credentials instances for authentication

0.3.5 (2017-06-23)

0.3.4 (2017-06-07)

  • Adding Preview Features - Managed Storage Account keys for managing storage credentials and provisioning SAS tokens - Key Vault “Soft Delete” allowing for recovery of deleted keys, secrets and certificates - Secret Backup and Restore for secret recovery and migration

0.3.3 (2017-05-10)

  • Reverting to 0.3.0, since behavior of 0.3.2 is not satisfaying either.

0.3.2 (2017-05-09)

  • Fix critical regression on 0.3.1 (#1157)
  • Now the client respects ‘REQUESTS_CA_BUNDLE’ and ‘CURL_CA_BUNDLE’

0.3.1 (2017-05-09)

  • Support for REQUESTS_CA_BUNDLE (#1154)

0.3.0 (2017-05-08)

  • Moving KeyVaultClient class to the azure.keyvault namespace
  • Moving model classes to the azure.keyvault.models namespace
  • Deprecating ‘generated’ namespaces azure.keyvault.generated and azure.keyvault.generated.models
  • Exposed KeyVaultId class through azure.keyvault namespace
  • Moving identifier parsing methods to static methods on KeyVaultId class
  • Removing convenience overridden methods from KeyVaultClient - update_key(self, key_identifier, … - get_key(self, key_identifier, … - encrypt(self, key_identifier, … - decrypt(self, key_identifier, … - sign(self, key_identifier, … - verify(self, key_identifier, … - wrap_key(self, key_identifier, … - unwrap_key(self, key_identifier, … - update_secret(self, secret_identifer, … - get_secret(self, secret_identifer, … - get_certificate(self, certificate_identifier, …

0.2.0 (2017-04-19)


  • Fix possible deserialization error, but updating from list<enumtype> to list<str> when applicable


  • This wheel package is now built with the azure wheel extension

0.1.0 (2016-12-29)

  • Initial Release

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Filename, size & hash SHA256 hash help File type Python version Upload date
azure_keyvault-1.1.0-py2.py3-none-any.whl (352.3 kB) Copy SHA256 hash SHA256 Wheel py2.py3 (363.9 kB) Copy SHA256 hash SHA256 Source None

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN SignalFx SignalFx Supporter DigiCert DigiCert EV certificate StatusPage StatusPage Status page