github Azure/azure-sdk-for-net Azure.Security.KeyVault.Keys_4.3.0

latest releases: Microsoft.Extensions.Azure_1.7.6, Azure.Core.Experimental_0.1.0-preview.36, Azure.Core_1.44.0...
2 years ago

4.3.0 (2022-03-24)

Changes from both the last release and the last beta include:

Features Added

  • Added Exportable and ReleasePolicy to CreateKeyOptions, ImportKeyOptions, and KeyProperties to support Secure Key Release for Key Vault and Managed HSM.

  • Added GetRandomBytes and GetRandomBytesAsync to KeyClient to get random bytes from a managed HSM.

  • Added JsonWebKeyConverter to support serializing and deserializing a JsonWebKey to a RFC 7517 JWK. (#16155)

  • Added KeyClient.GetCryptographyClient to get a CryptographyClient that uses the same options, policies, and pipeline as the KeyClient that created it. (#23786)

  • Added KeyReleasePolicy.Immutable property.

  • Added KeyRotationPolicy class and new methods including KeyClient.GetKeyRotationPolicy, KeyClient.RotateKey, and KeyClient.UpdateKeyRotationPolicy.

  • Added KeyVaultKeyIdentifier.TryCreate to parse key URIs without throwing an exception when invalid. (#23146)

  • Added ReleaseKey and ReleaseKeyAsync to KeyClient to release a key for Key Vault and Managed HSM.

  • Support multi-tenant authentication against Key Vault and Managed HSM when using Azure.Identity 1.5.0 or newer. (#18359)

  • Changed KeyRotationLifetimeAction.Action to read-only and added constructor to set the KeyRotationPolicyAction.

  • Renamed name parameter in GetKeyRotationPolicy and GetKeyRotationPolicyAsync to keyName.

  • Renamed name parameter in UpdateKeyRotationPolicy and UpdateKeyRotationPolicyAsync to keyName.

Bugs Fixed

  • The default service version is now "7.3".
  • Attempt to cache key locally from KeyClient.GetCryptographyClient. (#25254)
  • Added key version to distributed tracing. (#12907)

Breaking Changes

  • (Since 4.3.0-beta.7) KeyClient.ReleaseKey and ReleaseKeyAsync now take name and targetAttestationToken, or a ReleaseKeyOptions with a required name and targetAttestationToken along with additional properties.

Other Changes

  • KeyProperties.Version is no longer required when calling KeyClient.UpdateKeyProperties or UpdateKeyPropertiesAsync.

Don't miss a new azure-sdk-for-net release

NewReleases is sending notifications on new releases.