u/DavidWordshop

We have a client whose security policy requires that the private keys for their SSL certificates be stored in an HSM. I would like to use Key Vault for this, but all the documentation I can find around storing SSL certificates in the Key Vault is about certificates with exportable keys.

The website would be hosted on an Azure VM with appropriate RBAC permissions to access the vault. How would you access the private key within the vault in order to secure the website with the certificate?