Skip to main content

Microsoft Azure Key Vault Client Library for Python

Project description

Microsoft Azure SDK for Python

This is the Microsoft Azure Key Vault Client Library.

This package has been tested with Python 2.7, 3.4, 3.5 and 3.6.

For a more complete set of Azure libraries, see the azure bundle package.


IMPORTANT: If you have an earlier version of the azure package (version < 1.0), you should uninstall it before installing this package.

You can check the version using pip:

pip freeze

If you see azure==0.11.0 (or any version below 1.0), uninstall it first:

pip uninstall azure


For code examples, see Key Vault on

Provide Feedback

If you encounter any bugs or have suggestions, please file an issue in the Issues section of the project.

Release History

1.0.0 (2018-06-27)

  • Moving azure-keyvault to stable API version 7.0
  • Adding support for EC certificate create and import
  • Renaming curve SECP256K1 and algorithm ECDSA256 to P-256K and ES256K respectively

1.0.0b1 (2018-04-10)

  • Upgraded to autorest 3.0 generated code

General Breaking changes

This version uses a next-generation code generator that might introduce breaking changes.

  • Model signatures now use only keyword-argument syntax. All positional arguments must be re-written as keyword-arguments. To keep auto-completion in most cases, models are now generated for Python 2 and Python 3. Python 3 uses the “*” syntax for keyword-only arguments.
  • Enum types now use the “str” mixin (class AzureEnum(str, Enum)) to improve the behavior when unrecognized enum values are encountered. While this is not a breaking change, the distinctions are important, and are documented here: At a glance:
    • “is” should not be used at all.
    • “format” will return the string value, where “%s” string formatting will return NameOfEnum.stringvalue. Format syntax should be prefered.
  • New Long Running Operation:
    • Return type changes from msrestazure.azure_operation.AzureOperationPoller to msrest.polling.LROPoller. External API is the same.
    • Return type is now always a msrest.polling.LROPoller, regardless of the optional parameters used.
    • The behavior has changed when using raw=True. Instead of returning the initial call result as ClientRawResponse, without polling, now this returns an LROPoller. After polling, the final resource will be returned as a ClientRawResponse.
    • New polling parameter. The default behavior is Polling=True which will poll using ARM algorithm. When Polling=False, the response of the initial call will be returned without polling.
    • polling parameter accepts instances of subclasses of msrest.polling.PollingMethod.
    • add_done_callback will no longer raise if called after polling is finished, but will instead execute the callback right away.

1.0.0a2 (2018-03-28)

  • Upgrading to API version 7.0-preview
  • Adding elliptic curve key support
  • Adding managed storage account key backup, restore and soft delete support
  • Breaking update to managed storage account SasDefinition creation
  • Adding certificate backup and restore support
  • Adding certificate transparency

1.0.0a1 (2018-01-25)

  • Added message encryption support for message encryption enabled vaults

0.3.7 (2017-09-22)

0.3.6 (2017-08-16)

  • Updated KeyVaultClient to accept both KeyVaultAuthentication and azure.common.credentials instances for authentication

0.3.5 (2017-06-23)

0.3.4 (2017-06-07)

  • Adding Preview Features - Managed Storage Account keys for managing storage credentials and provisioning SAS tokens - Key Vault “Soft Delete” allowing for recovery of deleted keys, secrets and certificates - Secret Backup and Restore for secret recovery and migration

0.3.3 (2017-05-10)

  • Reverting to 0.3.0, since behavior of 0.3.2 is not satisfaying either.

0.3.2 (2017-05-09)

  • Fix critical regression on 0.3.1 (#1157)
  • Now the client respects ‘REQUESTS_CA_BUNDLE’ and ‘CURL_CA_BUNDLE’

0.3.1 (2017-05-09)

  • Support for REQUESTS_CA_BUNDLE (#1154)

0.3.0 (2017-05-08)

  • Moving KeyVaultClient class to the azure.keyvault namespace
  • Moving model classes to the azure.keyvault.models namespace
  • Deprecating ‘generated’ namespaces azure.keyvault.generated and azure.keyvault.generated.models
  • Exposed KeyVaultId class through azure.keyvault namespace
  • Moving identifier parsing methods to static methods on KeyVaultId class
  • Removing convenience overridden methods from KeyVaultClient - update_key(self, key_identifier, … - get_key(self, key_identifier, … - encrypt(self, key_identifier, … - decrypt(self, key_identifier, … - sign(self, key_identifier, … - verify(self, key_identifier, … - wrap_key(self, key_identifier, … - unwrap_key(self, key_identifier, … - update_secret(self, secret_identifer, … - get_secret(self, secret_identifer, … - get_certificate(self, certificate_identifier, …

0.2.0 (2017-04-19)


  • Fix possible deserialization error, but updating from list<enumtype> to list<str> when applicable


  • This wheel package is now built with the azure wheel extension

0.1.0 (2016-12-29)

  • Initial Release

Project details

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for azure-keyvault, version 1.0.0
Filename, size File type Python version Upload date Hashes
Filename, size azure_keyvault-1.0.0-py2.py3-none-any.whl (194.0 kB) File type Wheel Python version py2.py3 Upload date Hashes View
Filename, size (203.8 kB) File type Source Python version None Upload date Hashes View

Supported by

AWS AWS Cloud computing Datadog Datadog Monitoring Facebook / Instagram Facebook / Instagram PSF Sponsor Fastly Fastly CDN Google Google Object Storage and Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Salesforce Salesforce PSF Sponsor Sentry Sentry Error logging StatusPage StatusPage Status page