---
title: "Azure Integration - PKI Express"
description: "Configuring PKI Express to sign with certificates and keys in Azure Key Vault using azureAppId, azureAppSecret and azureKeyVaultEndpoint."
canonical: "https://docs.lacunasoftware.com/en-us/articles/pki-express/config/azure"
locale: "en"
product: "PKI Express"
last_updated: "2026-07-14"
---

# Azure Integration - PKI Express

PKI Express makes it possible to use certificates and keys stored in Azure Key Vaults to sign documents.

To use certificates or keys stored on a key vault, you will need the following parameters:

- **azureAppId**: the **Application ID** of an application registered on *Microsoft Entra ID*
- **azureAppSecret**: an authentication secret for the application, generated on *Certificates & secrets*
- **azureKeyVaultEndpoint**: the `DnsName` of the key vault, as shown on the *Overview* menu on Azure Portal

To configure [PKI Express](https://docs.lacunasoftware.com/en-us/articles/pki-express) to use Azure's Key Vault:

```sh
pkie config --set azureAppId=<id>
pkie config --set azureAppSecret=<secret>
pkie config --set azureKeyVaultEndpoint=<endpoint>
```