Manage Monitoring of Key Vault in Azure
Take charge of your Azure Key Vaults and Certificates with Nodinite. This page guides you to actively manage, monitor, and secure Key Vaults and Certificates—remotely and efficiently—without relying on the Azure Portal.
- ✅ Remotely edit thresholds and view details for Key Vaults and Certificates
- ✅ Empower teams with self-service and actionable insights
- ✅ Receive proactive alerts for ageing Keys, Secrets, and Certificates through Alarm Plugins
- ✅ Reduce risk by limiting Azure Portal access, and keep every action in the Audit Log
Note
Certificate monitoring in Azure Key Vault is available from version 7.7.x.
Stay ahead of issues! Nodinite alerts you to ageing Keys, Secrets, and Certificates and gives you instant access to details—no Azure Portal required.
In Azure, you deploy Certificates to different types of services. You manage two main collections:
- Azure Key Vault in general – this guide covers it
- Certificates deployed to Azure API Management Service Certificates (see the user guide)
Nodinite also monitors other Certificates and secrets in various environments:
- App Registrations – Monitor the client secrets and certificates of your Azure App Registrations.
- Azure Certificates – Monitor the Azure Certificate resources in your Subscriptions.
- Windows Certificates – Monitor certificates (X.509) in the Windows certificate stores.
- Web Service Certificates – Monitor the HTTPS certificates used by Web Applications, Web Services, and APIs.
You can delegate management and gain insights into selected Key Vaults in Azure. Nodinite Monitoring gives support and maintenance teams actionable data for root cause analysis—without requiring direct access to the Microsoft Azure Portal. By reducing access, you minimize attack vectors and lower the risk of disrupting mission-critical services.
Start with Monitoring Key Vault to understand the monitored vault, key, secret, and certificate context before using the management actions below.
Diagram: The Azure Monitoring Agent (blue) monitors the Keys, Secrets, and Certificates in your Key Vaults (teal) and the certificates of related Azure resources; API Management certificates (purple) have their own, separate monitoring.
| Application Management Team | IT Operations | Business |
|---|---|---|
| Empower your AM team to proactively manage Key Vaults and Certificates without disturbing IT operations | Stay in control with full access | Give your business information and self-service for Azure Key Vault solutions |
Management Features
For Resources in Role-based Monitor Views with the Remote Actions privilege, your Users can use the following Remote Actions, grouped by Category:
| Category | Monitoring | Actions | Metrics/Statistics |
|---|---|---|---|
| Key Vault | - | Details Edit |
- |
Info
The Nodinite Audit Log records every Remote Action that you and other Users perform.
As an Administrator with access to the Configuration for Monitoring Agents, you have these additional Monitoring options:
| Monitoring | Remote Configuration |
|---|---|
| Monitoring Key Vault |
|
Key Vault
The 'Key Vault' Category provides one Resource for each Key Vault found using the configuration, with the specified display name as the Resource name.
Example from a Monitor View with a list of 'Key Vaults'.
See Monitoring Key Vault for additional details about Key Vault Monitoring.
The Key Vault category provides Resources that display the evaluated monitored state according to built-in rules.
The following Remote Actions are available for the Key Vault Category:
The Details and Edit Remote Actions available for a Key Vault Resource.
Details
To view the selected Key Vault Resource, click the Action button and then click the Details menu item within the 'Control Center' section.
Use the 'Details' action menu item to open the details modal for the selected Key Vault.
Next, click the option to present the modal.
Example of the Key Vault details view showing Keys, Secrets, and Certificates sections.
Edit thresholds
To Edit the monitoring thresholds, click the Action button and then click the Edit menu item within the 'Control Center' section.
Example: Edit thresholds Action button menu item.
Next, click the option to present the modal.
Here's an example of editing monitoring thresholds for the selected 'Key Vault' store.
You can manage the following monitoring properties:
- ⚠️ Warning - Number of days before Certificate expires to trigger the Warning alert
- ❌ Error - Number of days before Certificate expires to trigger the Error alert
- Description - The user-friendly description of this specific Certificate monitoring configuration
Click the Save button to persist changes. To override the evaluated state for one Resource instead, use Expected State.
The Save button persists the new thresholds.