Manage Monitoring of Key Vault in Azure
Take charge of your Azure Key Vaults and Certificates with Nodinite. This page guides you to actively manage, monitor, and secure Key Vaults and Certificates—remotely and efficiently—without relying on the Azure Portal.
- ✅ Remotely edit thresholds and view details for Key Vaults and Certificates
- ✅ Empower teams with self-service and actionable insights
- ✅ Receive proactive alerts for ageing Keys, Secrets, and Certificates through Alarm Plugins
- ✅ Reduce risk by limiting Azure Portal access, and keep every action in the Audit Log
Animated walkthrough: a Key Vault in Error because a secret has expired, its Details with the Keys, Secrets, and Certificates and their expiry dates, and Edit with the Warning and Error limits in days. The walkthrough closes the modal without Save.
Note
Certificate monitoring in Azure Key Vault is available from version 7.7.x.
Stay ahead of issues! Nodinite alerts you to ageing Keys, Secrets, and Certificates and gives you instant access to details—no Azure Portal required.
In Azure, you deploy Certificates to different types of services. You manage two main collections:
- Azure Key Vault in general – this guide covers it
- Certificates deployed to Azure API Management Service Certificates (see the user guide)
Nodinite also monitors other Certificates and secrets in various environments:
- App Registrations – Monitor the client secrets and certificates of your Azure App Registrations.
- Azure Certificates – Monitor the Azure Certificate resources in your Subscriptions.
- Windows Certificates – Monitor certificates (X.509) in the Windows certificate stores.
- Web Service Certificates – Monitor the HTTPS certificates used by Web Applications, Web Services, and APIs.
You can delegate management and gain insights into selected Key Vaults in Azure. Nodinite Monitoring gives support and maintenance teams actionable data for root cause analysis—without requiring direct access to the Microsoft Azure Portal. By reducing access, you minimize attack vectors and lower the risk of disrupting mission-critical services.
Start with Monitoring Key Vault to understand the monitored vault, key, secret, and certificate context before using the management actions below.
Diagram: The Azure Monitoring Agent (blue) monitors the Keys, Secrets, and Certificates in your Key Vaults (teal) and the certificates of related Azure resources; API Management certificates (purple) have their own, separate monitoring.
| Application Management Team | IT Operations | Business |
|---|---|---|
| Empower your AM team to proactively manage Key Vaults and Certificates without disturbing IT operations | Stay in control with full access | Give your business information and self-service for Azure Key Vault solutions |
Management Features
For Resources in Role-based Monitor Views with the Remote Actions privilege, your Users can use the following Remote Actions, grouped by Category:
| Category | Monitoring | Actions | Metrics/Statistics |
|---|---|---|---|
| Key Vault | ✅ Yes | Details Edit |
- |
The Monitoring column means that the Key Vault Resource itself changes state: an expiring Key, Secret, or Certificate turns it Warning or Error (see Monitoring Key Vault).
Info
The Nodinite Audit Log records every Remote Action that you and other Users perform.
As an Administrator with access to the Configuration for Monitoring Agents, you have these additional Monitoring options:
| Monitoring | Remote Configuration |
|---|---|
| Monitoring Key Vault |
|
Key Vault
The 'Key Vault' Category provides one Resource for each Key Vault found using the configuration, with the specified display name as the Resource name.
Example from a Monitor View filtered on the 'Key Vault' Category: the Key Vault is in Error because "One or more Key Vault Secrets have expired."
See Monitoring Key Vault for additional details about Key Vault Monitoring.
The Key Vault category provides Resources that display the evaluated monitored state according to built-in rules.
The following Remote Actions are available for the Key Vault Category:
The Details and Edit Remote Actions available for a Key Vault Resource.
Details
To view the selected Key Vault Resource, click the Action button and then click the Details menu item within the 'Control Center' section.
Use the 'Details' action menu item to open the details modal for the selected Key Vault.
Next, click the option to present the modal.
Example of the Key Vault Details modal. The Keys, Secrets, and Certificates sections list each item with its Created and Expires dates and its Status, here an Expired secret and a certificate that is OK.
Edit thresholds
To Edit the monitoring thresholds, click the Action button and then click the Edit menu item within the 'Control Center' section.
The Edit menu item opens the Edit modal with the thresholds.
Next, click the option to present the modal.
Example of the Edit modal for the selected Key Vault, with Warning 14 and Error 7 days.
The Allowed Limit section holds the two limits, as whole days (Limit format (days in integer number)). They apply to the Keys, Secrets, and Certificates in the Key Vault:
- ⚠️ Warning - The Key Vault turns Warning when an item expires in fewer than this number of days
- ❌ Error - The Key Vault turns Error when an item expires in fewer than this number of days
- Description - The user-friendly description of this specific Key Vault monitoring configuration
Keep the Error limit smaller than the Warning limit, so an item reaches Warning before Error.
Click the Save button to persist changes. To override the evaluated state for one Resource instead, use Expected State.
The Save button persists the new thresholds.