"Download in PFX/PEM format" greyed out

[mrodriguez-ms]

Add documentation detailing why "Download in PFX/PEM format" would be greyed out/disabled in the Azure portal for downloading certificates.

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: d39f7f3d-668d-a922-4695-0539a075dcdc
• Version Independent ID: 31b6a561-d2bb-350d-e4f5-3399df55b7b8
• Content: Export certificates from Azure Key Vault
• Content Source: articles/key-vault/certificates/how-to-export-certificate.md
• Service: key-vault
• Sub-service: certificates
• GitHub Login: @msmbaldwin
• Microsoft Alias: mbaldwin

[AjayBathini-MSFT]

@mrodriguez-ms Thanks for your feedback! We will investigate and update as appropriate.

[YashikaTyagii]

@mrodriguez-ms Could you share details on how you get to know that "Download in PFX/PEM format" would be greyed out/disabled in the Azure portal for downloading certificate.

[Beep-beep-boop-bop]

I had a very similar issue with in one of my Azure Key Vaults. One exhibited the same "defect" and another did not. The difference between the two Key Vaults was the Access Configuration. Key Vault A was configured with access policy. This worked as expected. Key Vault B was configured with Azure role-based access control. The "Download in PFX/PEM format" control was greyed out/disabled in the Azure portal.

Once I configured Key Vault B using Azure role-based access control in the Access Configuration, I was able to download certificates in PFX/PEM format.

For clarity, my user account had both the Contributor/Owner and Key Vault Administrator Role assignment on Key Vault B.

[mrodriguez-ms]

@YashikaTyagi-MSFT See this stack overflow post: https://stackoverflow.microsoft.com/questions/335285

You need Secret Permissions -> Secret Management Operations -> Get

I found my answer outside of microsoft documentation, I think it would be good to mention in the docs.

[YashikaTyagii]

@mrodriguez-ms Thanks for the info I am assigning the issue to the content author who will update accordingly.

[YashikaTyagii]

@msmbaldwin Kindly taka a look at this issue.

[mrodriguez-ms]

Here is some more information, hope this help:

[jeromerg]

And with RBAC, which role owns this "Secret Permission"?

[jeromerg]

Found it: "Key Vault Secrets User"!!!

[msmbaldwin]

We sincerely apologize for the delayed response. We are closing this issue for now, but if you feel that it's still a concern, please respond and let us know. If you determine another possible update to our documentation, please don't hesitate to reach out again. #please-close