();
var azure_session_config = new AzureSessionConfig(tenant_id, client_id, client_secret);
AzureKeyValueStorage azure_storage = new AzureKeyValueStorage(keyId, path, azure_session_config, logger);
SecretsManagerClient.InitializeStorage(azure_storage, dotnet_access_token);
var options = new SecretsManagerOptions(azure_storage);
var records_list = await SecretsManagerClient.GetSecrets(options);
records_list.Records.ToList().ForEach(record => Console.WriteLine(record.RecordUid + " - " + record.Data.title));
}
static async Task Main()
{
await getOneIndividualSecret();
}
}
```
{% endtab %}
{% endtabs %}
## Additional Options
### Change Key
We can change key that is used for encrypting the KSM configuration, examples below show the code needed to use it
{% tabs %}
{% tab title="Java" %}
//The method changeKey(newKeyID) will be used to encrypt the KSM config file with new azure key.
....
String newKeyID = "https://<vault-name>.vault.azure.net/keys/<keyname>/<keyversion>";
AzureKeyValueStorage azkvstorage = AzureKeyValueStorage.getInternalStorage(keyId, configFileLocation, azConfig);
boolean isChanged = azkvstorage.changeKey(newKeyID); // Change the key for encryption/decryption
....
{% endtab %}
{% tab title="JavaScript" %}
// To change the Azure Key Vault key used for encryption, you can call the `changeKey` method on the `AzureKeyValueStorage` instance.
.....
const keyId = 'https://<vault_name>.vault.azure.net/keys/<key_name>/<version>'
const keyId2 = "https://<vault_name>.vault.azure.net/keys/<key_name>/<version>"
const storage = await new AzureKeyValueStorage(keyId, config_path, azureSessionConfig, logLevel).init();
await storage.changeKey(keyId2);
.....
{% endtab %}
{% tab title="Python" %}
```python
azure_key_value_storage = AzureKeyValueStorage(key_id=key_id,config_file_location=config_path ,az_session_config=azure_session_config)
new_key_id = ""
is_changed = azure_key_value_storage.change_key(new_key_id = new_key_id)
print("Key is changed " + is_changed)
```
{% endtab %}
{% tab title=".Net" %}
```csharp
// To change the Azure key used for encryption, you can call the `ChangeKeyAsync` method on the `AzureKeyValueStorage` instance.
using Microsoft.Extensions.Logging;
....
var keyId2 = "";
var loggerFactory = LoggerFactory.Create(builder =>
{
builder.SetMinimumLevel(LogLevel.Debug);
builder.AddConsole();
});
var logger = loggerFactory.CreateLogger();
AzureKeyValueStorage azure_storage = new AzureKeyValueStorage(keyId, path, azure_session_config, logger);
azure_storage.ChangeKeyAsync(keyId2).Wait();
....
```
{% endtab %}
{% endtabs %}
### Decrypt Config
We can decrypt the config if current implementation is to be migrated onto a different cloud or if you want your raw credentials back. The function accepts a boolean which when set to true will save the decrypted configuration to file and if it is false, will just return decrypted configuration.
{% tabs %}
{% tab title="Java" %}
```java
....
AzureKeyValueStorage azkvstorage = AzureKeyValueStorage.getInternalStorage(keyId, configFileLocation, azConfig);
azkvstorage.decryptConfig(false); // Set false as a parameter to extract only plaintext.
//OR
azkvstorage.decryptConfig(true); // Set true as a parameter to extract plaintext and save config as a plaintext.
....
```
{% endtab %}
{% tab title="JavaScript" %}
```javascript
// To decrypt the config file, call the `decryptConfig` method on the `AzureKeyValueStorage` instance.
// ....
const storage = await new AzureKeyValueStorage(keyId, configPath, azureSessionConfig, logLevel).init();
const decryptedConfig = await storage.decryptConfig(true); // Saves plaintext to file and returns it
// OR
const decryptedConfig = await storage.decryptConfig(false); // Returns plaintext without saving to file
// ....
```
{% endtab %}
{% tab title="Python" %}
```python
storage = AzureKeyValueStorage(key_id=key_id,config_file_location=config_path ,az_session_config=azure_session_config)
storage.decrypt_config() #saved plain config to file
# or
storage.decrypt_config(False)# returns config as return value, file will stay encrypted
```
{% endtab %}
{% tab title=".Net" %}
```csharp
//To decrypt the config file and save it again in plaintext, you can call the `DecryptConfigAsync` method on the `AzureKeyValueStorage` instance.
....
var keyId2 = "";
AzureKeyValueStorage azure_storage = new AzureKeyValueStorage(keyId, path, azure_session_config, logger);
await azure_storage.DecryptConfigAsync(true); // return decrypted and Saves to file
//OR
await azure_storage.DecryptConfigAsync(false); // returns the decrypted config
....
```
{% endtab %}
{% endtabs %}
{% hint style="success" %}
You're ready to use the KSM Storage integration :thumbsup:
{% endhint %}
{% hint style="info" %}
Check out the [KSM SDKs documentation](https://docs.keeper.io/en/keeperpam/secrets-manager/developer-sdk-library) for more examples and functionality
{% endhint %}
