NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →

PackageTrack. Know what changed before it breaks something.

About Terms of Service Privacy Policy

NuGet · #123 most downloaded on NuGet

Azure.Security.KeyVault.Certificates

4.9.2290M downloads/moAzure/azure-sdk-for-net ↗New releases in your daily digest, changelog included.

This is the Microsoft Azure Key Vault Certificates client library

Last release 6 days ago
03 Oct 2026
Ships fairly regularly
a new release about every 8 months
Nearly every release is documented
notes for 16 of 16 stable releases
1 version withdrawn
withdrawn after publishing
127 years old
17 releases · first in 1900

Release timeline

17 releases since 1900

Releases

4.9.23 Oct 20262 sources agree
Fixed handling of claims challenges when the authentication challenge cache is empty or cleared while a request is in flight.
4.9.2 (2026-10-02)

Bugs Fixed

Fixed handling of claims challenges when the authentication challenge cache is empty or cleared while a request is in flight.

Fixed an issue in the challenge-based authentication policy where a cached authentication challenge accepted with challenge resource verification disabled could be reused by a separate default-strict client without revalidating the challenge resource.

Improved authentication challenge resource validation.
Open source →
4.9.13 Sept 20262 sources agree
Fixed an issue in the challenge-based authentication policy where a cached authentication challenge, and the access token acquired for it, could be re
4.9.1 (2026-09-02)

Bugs Fixed

Fixed an issue in the challenge-based authentication policy where a cached authentication challenge, and the access token acquired for it, could be reused for a request to a different Key Vault or Managed HSM endpoint. The policy now resolves the challenge per request endpoint, ensuring a token acquired for one vault is never attached to a request to another.

From the same repository

Azure/azure-sdk-for-net

Azure.CoreNuGetThis is the implementation of the Azure Client Pipeline
Azure.IdentityNuGetProvides APIs for authenticating to Microsoft Entra ID
System.ClientModelNuGetContains building blocks for clients that call cloud services.
Azure.Storage.BlobsNuGetThis client library enables working with the Microsoft Azure Storage Blob service for storing binary and text data. For this release see notes - https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/storage/Azure.Storage.Blobs/README.md and https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/storage/Azure.Storage.Blobs/CHANGELOG.md in addition to the breaking changes https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/storage/Azure.Storage.Blobs/BreakingChanges.txt Microsoft Azure Storage quickstarts and tutorials - https://docs.microsoft.com/en-us/azure/storage/ Microsoft Azure Storage REST API Reference - https://docs.microsoft.com/en-us/rest/api/storageservices/ REST API Reference for Blob Service - https://docs.microsoft.com/en-us/rest/api/storageservices/blob-service-rest-api

1900190219041906190819101912191419161918192019221924192619281930193219341936193819401942194419461948195019521954195619581960196219641966196819701972197419761978198019821984198619881990199219941996199820002002200420062008201020122014201620182020202220242026

19002026

One column per quarter.

Open source →

▸▾4.9.027 May 2026

Code | Docs Support: Active

Code | Docs

Support: Active

Open source →

Additional notes2 sources agree

Features Added

Includes all changes from 4.9.0-beta.1.

Open source →

▸▾4.8.017 Jun 2025

Code | Docs

Code | Docs

Open source →

Additional notes2 sources agree

Acknowledgments

Thank you to our developer community members who helped to make the Key Vault client libraries better with their contributions to this release:

James Gould (GitHub)

Bugs Fixed

Removed additional forward slash in RestoreCertificateBackup and RestoreCertificateBackupAsync.

Other Changes

The default service version is now "7.6".

Open source →

▸▾4.7.015 Oct 20242 sources agree

Support for Continuous Access Evaluation (CAE).

Features Added

Support for Continuous Access Evaluation (CAE).

Open source →

▸▾4.6.015 Feb 20242 sources agree

Changes from both the last release and the last beta include:

Changes from both the last release and the last beta include:

Features Added

Added CertificateProperties.X509ThumbprintString to return the hexadecimal string representation of the SHA-1 hash of the certificate. CertificateProperties.X509Thumbprint has been hidden but is still available.

Breaking Changes

Renamed tags reported on CertificateClient activities to following OpenTelemetry attribute naming conventions:
- certificate to az.keyvault.certificate.name
- version to az.keyvault.certificate.version
- issuer to az.keyvault.certificate.issuer.name

Bugs Fixed

When a Key Vault is moved to another tenant, the client is reauthenticated.

Other Changes

The default service version is now "7.5".
Distributed tracing with ActivitySource is stable and no longer requires the Experimental feature-flag.

Open source →

▸▾4.5.131 Mar 20232 sources agree

Correctly serialize CertificateIssuer.OrganizationId property

Bugs Fixed

Correctly serialize CertificateIssuer.OrganizationId property (#35245)

Open source →

▸▾4.5.014 Mar 20232 sources agree

Service version "7.4-preview.1" is not supported.

Breaking Changes

Service version "7.4-preview.1" is not supported.

Other Changes

The default service version is now "7.4".

Open source →

▸▾4.4.020 Sept 20222 sources agree

Verify the challenge resource matches the vault domain. This should affect few customers who can set CertificateClientOptions.DisableChallengeResource

Breaking Changes

Verify the challenge resource matches the vault domain. This should affect few customers who can set CertificateClientOptions.DisableChallengeResourceVerification to true to disable. See https://aka.ms/azsdk/blog/vault-uri for more information.

Open source →

▸▾4.3.026 Mar 20222 sources agree

Changes from both the last release and the last beta include:

Changes from both the last release and the last beta include:

Features Added

Added KeyVaultCertificateIdentifier.TryCreate to parse certificate URIs without throwing an exception when invalid. (#23146)
Support multi-tenant authentication against Key Vault and Managed HSM when using Azure.Identity 1.5.0 or newer. (#18359)

Bugs Fixed

Added DownloadCertificateOptions to pass X509KeyStorageFlags appropriate for different host applications. (#23016)
Added certificate version to distributed tracing. (#12907)

Breaking Changes

(Since 4.3.0-beta.4) To pass X509KeyStorageFlags you must now pass a single required DownloadCertificateOptions with a required certificateName.

Other Changes

The default service version is now "7.3".

Open source →

▸▾4.2.016 Jun 20212 sources agree

Changed default service version to "7.2".

Features Added

Changed default service version to "7.2".
Added KeyVaultCertificateIdentifier to parse certificate URIs.
Added CertificateClient.DownloadCertificate and DownloadCertificateAsync to download an X509Certificate2 with private key.

Open source →

▸▾4.1.11 Jan 1900withdrawn2 sources agree

### Changed - Updated dependency versions

Changed

Updated dependency versions

Open source →

▸▾4.1.012 Aug 2020

Functions Extensions - WebPubSub

Code | Docs

Support: Active

Functions Extensions - WebPubSub

Microsoft.Azure.Functions.Worker.Extensions.WebPubSub

Open source →

Additional notes2 sources agree

Added

Added RecoverableDays property to CertificateProperties.

Changed

Default service version is now 7.1.

Open source →

▸▾4.0.39 Jul 20202 sources agree

Fixed an issue where the issuer name was always null

Fixed

Fixed an issue where the issuer name was always null (#10908)
Fixed an issue where GetIssuerAsync would throw for issuers with contact information populated (#10905)
Fixed an issue where some Certificate policy properties were not serialized properly (#11669)

Open source →

▸▾4.0.24 Apr 20202 sources agree

Fixed concurrency issue in our challenge-based authentication policy

Fixed

Fixed concurrency issue in our challenge-based authentication policy (#9737)

Open source →

▸▾4.0.14 Mar 20202 sources agree

Fixed issue that prevented certificate contacts from being created, enumerated, or deleted.

Fixed

Fixed issue that prevented certificate contacts from being created, enumerated, or deleted.
Reset challenge cache so tests can be run individually and in any order. (#9356)
Properly import PKCS12 or PEM-encoded certificate. (#9963)
Serialize the MergeCertificateOptions in CertificateClient.MergeCertificate. (#9986)
Shorten diagnostic scope names. (#9651)
Include resource namespace in diagnostics scope. (#9655)
Sanitize header values in exceptions. (#9782)

Open source →

▸▾4.0.09 Jan 20202 sources agree

Challenge-based authentication requests are only sent over HTTPS.

Minor changes

Challenge-based authentication requests are only sent over HTTPS.

Open source →

Your coding agent can read these notes before it upgrades. Set up the MCP server →

Azure.Security.KeyVault.SecretsNuGetThis is the Microsoft Azure Key Vault Secrets client library

Azure.Storage.CommonNuGetThis client library enables working with the Microsoft Azure Storage services which include the blob and file services for storing binary and text data, and the queue service for storing messages that may be accessed by a client. For this release see notes - https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/storage/Azure.Storage.Common/README.md and https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/storage/Azure.Storage.Common/CHANGELOG.md in addition to the breaking changes https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/storage/Azure.Storage.Common/BreakingChanges.txt Microsoft Azure Storage quickstarts and tutorials - https://docs.microsoft.com/en-us/azure/storage/ Microsoft Azure Storage REST API Reference - https://docs.microsoft.com/en-us/rest/api/storageservices/

Azure.Messaging.ServiceBusNuGetAzure Service Bus is a fully managed enterprise integration message broker. Service Bus can decouple applications and services. Service Bus offers a reliable and secure platform for asynchronous transfer of data and state. This client library allows for both sending and receiving messages using Azure Service Bus. For more information about Service Bus, see https://learn.microsoft.com/azure/service-bus-messaging/service-bus-messaging-overview

Azure.Storage.QueuesNuGetThis client library enables working with the Microsoft Azure Storage Queue service for storing messages that may be accessed by a client. For this release see notes - https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/storage/Azure.Storage.Queues/README.md and https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/storage/Azure.Storage.Queues/CHANGELOG.md in addition to the breaking changes https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/storage/Azure.Storage.Queues/BreakingChanges.txt Microsoft Azure Storage quickstarts and tutorials - https://docs.microsoft.com/en-us/azure/storage/ Microsoft Azure Storage REST API Reference - https://docs.microsoft.com/en-us/rest/api/storageservices/ REST API Reference for Queue Service - https://docs.microsoft.com/en-us/rest/api/storageservices/queue-service-rest-api