Signing code with certificate in Azure Key Vault Managed HSM

Question

I am trying to sign code with a certificate from Azure Key Vault Managed HSM. This is an EV certificate, so I cannot just use a normal Azure Key Vault as in the helpful walk-through here does.

I keep getting the error:

"Failed to retrieve certificate codesign from Azure Key Vault. Please verify the name of the certificate and the permissions to the certificate. Error message: Not Found"

It is not a requirement that I use azuresigntool - are other tools available?

I think I have checked all the permissions, but I cannot see the "Access policies" for an HSM key vault. Instead, there is an RBAC setting - here, I have granted my application the Managed HSM Crypto User role for all keys.

But still no luck.

Answer 1

It was my own fault: I had added keys to the key vault, not certificates.