See below for creating a client secret in Azure Active Directory.

To create a client secret

  1. Navigate to Azure > Azure Active Directory > App Registrations > <the BYOK application> > Certificates & Secrets.

  2. Select New client secret to create the client secret.

  3. Add the description and set the expiration period. The recommended period is 24 months.  

    You will have to update the secret in CSP Vault before the expiration date that you set here in order to have uninterrupted access to Azure Key Vaults from Cryptographic Security Platform Vault.

  4. Copy the Value of the new client secret and paste it into a text file. Use this value to create a Cloud Service Provider Account in CSP Vault. 

    This value is displayed in the Azure Portal only temporarily. Once the portal hides it, you can't retrieve it, and you will need to create a new client secret.