Document Details

Enable Key Vault Virtual Machine
Home / Scan #41 / Enable Key Vault Virtual Machine
Sad Tux - Windows bias detected
This page contains Windows bias

About This Page

This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
GitHub View on GitHub 📚 View on Microsoft Learn

Bias Analysis

Detected Bias Types
windows_first
missing_linux_example
windows_tools
Summary
The documentation is heavily Windows-centric: it explicitly refers to the Key Vault VM extension for Windows, describes certificate handling only in the context of the Windows certificate store, and uses Windows-specific terms (e.g., 'LocalMachine', 'My' store). There are no examples or mentions of Linux support, tools, or equivalent processes, and all instructions assume a Windows environment.
Recommendations
  • Clarify early in the documentation whether the Key Vault VM extension is available for Linux VMs in Azure Cloud Services (extended support).
  • If Linux support exists, provide parallel instructions and examples for Linux, including how certificates are handled and where they are stored.
  • Mention Linux certificate stores (such as /etc/ssl/certs or similar) and how the extension interacts with them.
  • If the extension is Windows-only, state this explicitly at the top of the article to set expectations for Linux users.
  • Include references or links to Linux-specific documentation if available.
GitHub Create Pull Request

Scan History

Date Scan Status Result
2025-07-12 23:44 #41 cancelled Biased Biased
2025-07-12 00:58 #8 cancelled Clean Clean
2025-07-10 05:06 #7 processing Clean Clean

Flagged Code Snippets

    {
        "osProfile":
        {
            "secrets":
            [
                {
                    "sourceVault":
                    {
                        "id": "[parameters('sourceVaultValue')]"
                    },
                    "vaultCertificates":
                    [
                        {
                            "certificateUrl": "[parameters('bootstrpCertificateUrlValue')]"
                        }
                    ]
                }
            ]
        },
        "extensionProfile":
        {
            "extensions":
            [
                {
                    "name": "KVVMExtensionForPaaS",
                    "properties":
                    {
                        "type": "KeyVaultForPaaS",
                        "autoUpgradeMinorVersion": true,
                        "typeHandlerVersion": "1.0",
                        "publisher": "Microsoft.Azure.KeyVault",
                        "settings":
                        {
                            "secretsManagementSettings":
                            {
                                "pollingIntervalInS": "3600",
                                "certificateStoreName": "My",
                                "certificateStoreLocation": "LocalMachine",
                                "linkOnRenewal": false,
                                "requireInitialSync": false,
                                "observedCertificates": "[parameters('keyVaultObservedCertificates']"
                            },
                            "authenticationSettings":
                            {
                                "clientId": "Your AAD app ID",
                                "clientCertificateSubjectName": "Your boot strap certificate subject name [Do not include the 'CN=' in the subject name]"
                            }
                        }
                    }
                }
            ]
        }
    }
    
        <Certificates>
                 <Certificate name="bootstrapcert" storeLocation="LocalMachine" storeName="My" />
        </Certificates>