azure-security-keyvault-keys-java

Manage cryptographic keys in Java using the azure-security-keyvault-keys SDK to create RSA, EC, and OCT keys, import existing keys, and rotate or purge them within Azure Key Vault or Managed HSM.

Encrypt and decrypt data in Java with an HSM-backed key using the CryptographyClient, which performs cryptographic operations locally or remotely while keeping private key material securely inside the Managed HSM.

Yes, you can use DefaultAzureCredential to authenticate Java applications accessing Azure Key Vault keys, provided your environment has appropriate permissions configured for the target Key Vault or Managed HSM.

Rotate keys and configure rotation policies in Azure Key Vault using the Java SDK, which supports key lifecycle management including automated rotation, backup, restore, and soft-delete protection for production deployments.

Yes, the Java SDK supports signing and verifying tokens using CryptographyClient operations, allowing Java applications to sign payloads and verify signatures with RSA or EC keys stored in Azure Key Vault.

Local cryptographic operations require imported public key material and cannot access HSM-protected private keys directly; operations involving private keys must be performed remotely through the Key Vault service.