(PowerShell) Azure Key Vault - Get a Binary Secret

See more Secrets Examples

Demonstrates how to fetch the content of a binary secret from the Azure Key Vault.

Note: This example requires Chilkat v10.1.0 or later.

For more information, see https://cknotes.com/chilkat-secrets-class-added-in-version-10-1-0/

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-x64\ChilkatDotNet47.dll"

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# The bootstrap secret will contain the following information:

# Azure Tenant ID
# Azure Client ID
# Azure Client Secret

# See following examples for setting up a bootstrap secret in memory, 
# or in the local manager (Windows Credentials Manager or Apple Keychain)
# Setup Bootstrap Secret in Local Manager
# Setup Bootstrap Secret in Memory
$bootstrap = New-Object Chilkat.Secrets

# Set the location of the bootstrap secret.
# Can be "local_manager" or "memory", depending on how you setup the bootstrap secret.
# ---------------------------------------------------------------------------------------------
# If your operating system is NOT Windows or MacOS/iOS, then change "local_manager" to "memory"
# You can also, if desired, use "memory" on Windows and MacOS/iOS if your bootstrap secret was previously setup in memory.
# ---------------------------------------------------------------------------------------------
$bootstrap.Location = "local_manager"

# Specify the bootstrap secret to be used.
$bsId = New-Object Chilkat.JsonObject
$bsId.UpdateString("appName","azure_bs")
$bsId.UpdateString("service","Example")
$bsId.UpdateString("username","Joe")

# ----------------------------------------------------
$secrets = New-Object Chilkat.Secrets

$secrets.Location = "azure_key_vault"
$success = $secrets.SetBootstrapSecret($bsId,$bootstrap)
if ($success -eq $false) {
    $($secrets.LastErrorText)
    exit
}

# Specify the secret to be fetched.
$json = New-Object Chilkat.JsonObject
$json.UpdateString("appName","Test2")
$json.UpdateString("service","Custom")
$json.UpdateString("domain","Ocean")
$json.UpdateString("username","Starfish")

# For Azure Key Vault, we also need to specify the name of the vault where the secret is located.
# Replace "kvChilkat" with the name of your key vault.
$json.UpdateString("vaultName","kvChilkat")

# Get the binary secret data.
$bd = New-Object Chilkat.BinData
$success = $secrets.GetSecretBd($json,$bd)
if ($success -eq $false) {
    $($secrets.LastErrorText)
    exit
}

# For our testing, the binary secret was a JPG image..
$bd.WriteFile("c:/temp/qa_output/starfish.jpg")

$("Success.")