Azure-Samples / storage-dotnet-client-side-encryption

This sample demonstrates how to use client side encryption along with Azure Key Vault integration

services	platforms	author
storage, keyvault	dotnet	woodp

Getting Started with Azure Client Side Encryption in .NET

Azure Client Side Encryption Sample - Demonstrates how to use encryption along with Azure Key Vault integration for the Azure Blob service.

Note: If you don't have a Microsoft Azure subscription you can get a FREE trial account here

Running this sample

• Create a Storage Account through the Azure Portal

• Set up your Key Vault following the instructions on this post: https://azure.microsoft.com/en-us/documentation/articles/key-vault-get-started/ . Make sure to permit 'get' and 'unwrapkey' options to the key you create.

  Set-AzureRmKeyVaultAccessPolicy -VaultName 'ContosoKeyVault' -ServicePrincipalName 853csbtd-485b-45f3-98f7-ec2301b7b44d -PermissionsToKeys get,unwrapkey

• Open the App.config file and set "StorageConnectionString", "KVClientId", "KVClientKey", "VaultUri" and optionally "KeyID"

• Set breakpoints and run the project

More information

What is a Storage Account

Get started with Azure Key Vault

Client-Side Encryption and Azure Key Vault for Microsoft Azure Storage

Client-Side Encryption with Java for Microsoft Azure Storage

Tutorial: Encrypt and decrypt blobs in Microsoft Azure Storage using Azure Key Vault

Getting Started with Blobs

Blob Service Concepts

Blob Service REST API

Get started with Azure Blob storage using .NET

Blob Service Java API