---
id: azure-keyvault-certificates
version: "4.11.1"
license: MIT License
license_treatment: permissive
maintenance: active
---

# azure-keyvault-certificates — Microsoft Corporation Key Vault Certificates Client Library for Python

License: permissive · Maintenance: active · Downloads: 14.0M/mo

## What it is and what it does

This is the official Azure SDK client library for managing certificates in Azure Key Vault. It provides a Python interface to create, store, retrieve, update, and delete SSL/TLS certificates in a managed vault, with support for certificate versioning, policies, issuers, and metadata. The library depends on azure-core for HTTP communication and isodate for date handling, abstracting REST API calls to Key Vault.

Typically used in applications that need centralized certificate lifecycle management—issuing new certificates, rotating versions, enforcing policies, or retrieving certificates for use in TLS/SSL configurations. It integrates with the broader Azure Key Vault ecosystem and is part of the official Azure SDK for Python.

Use it for:

- Automate SSL/TLS certificate creation and renewal in Azure Key Vault for web applications and services.
- Retrieve and deploy the latest certificate version to load balancers or reverse proxies without manual intervention.
- Enforce certificate policies (validity periods, key sizes, issuer constraints) across an organization.
- Manage certificate metadata and track certificate versions for compliance and audit purposes.
- Integrate certificate management into CI/CD pipelines for automated infrastructure provisioning.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Manages SSL/TLS certificates stored in Azure Key Vault—create, retrieve, update, delete, and control versions of certificates with support for certificate policies and issuers.

Yes. This is the official, actively maintained Azure SDK library for certificate management. It has low install friction, no known vulnerabilities, permissive licensing, and is widely used (top 5000 PyPI packages). Install it if you need to manage certificates in Azure Key Vault; it is the standard choice for this task.

## Install

pip install azure-keyvault-certificates
uv add azure-keyvault-certificates
poetry add azure-keyvault-certificates

## Installing azure-keyvault-certificates

Before you install: Low install friction with three lightweight runtime dependencies (isodate, azure-core, typing-extensions). Actively maintained with a recent release and no known vulnerabilities.

License in practice: MIT License permits commercial and private use with minimal restrictions; suitable for most projects.

Quickstart:

pip install azure-keyvault-certificates

from azure.keyvault.certificates import CertificateClient
from azure.core import credential

client = CertificateClient(vault_url="https://my-key-vault.vault.azure.net/", credential=credential)
certificate = client.get_certificate("cert-name")

Requires Python 3.9 or later; requires an existing Azure Key Vault and Azure subscription; authentication credential must be configured separately.

Verify before relying:

- Whether async operations (aio.CertificateClient) are production-ready or have known limitations.
- Performance characteristics for bulk certificate operations or large-scale deployments.
- Whether certificate import/export functionality is supported beyond creation and retrieval.
- Specific authentication methods supported beyond what the fact sheet documents.

## Package facts

- License: MIT License (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 14.0M/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

azure key vault certificate management, ssl tls certificate storage azure, certificate lifecycle management, azure certificate client library, key vault certificate operations, certificate policy management, azure certificate versioning, azure-sdk, certificate-management, cloud-security

[View on SkillFed](https://skillfed.io/packages/azure-keyvault-certificates) · [View on PyPI](https://pypi.org/project/azure-keyvault-certificates/)