Rotate Azure storage access keys

This section describes how to rotate Azure Storage account access keys used by the Delphix Engine.

Azure Storage credentials are stored in the objectStorage configuration. When a storage key is rotated in Azure (Key1/Key2), the corresponding key must also be updated on the Delphix Engine so it can continue to access the container.

Prerequisites

You must log in as admin or a user with Admin privileges.

Procedure

1. Log in to the Delphix Engine CLI.

   ssh admin@<engine-hostname>

2. Navigate to the Object Storage configuration.

   ENGINE> storage
   ENGINE storage> objectStorage

3. Display the current Blob Object Store configuration.

   ENGINE storage objectStorage> ls

   You should see output similar to:

   Properties
     type: BlobObjectStore
     accessCredentials:
         type: BlobObjectStoreAccessKey
         azureAccount: dlpxstoracct01
         azureKey: ********
     cacheDevices: lun0
     container: dlpxcontainer01
     endpoint: -
     size: 10TB

4. Enter update mode.

   ENGINE storage objectStorage> update

5. Set the new Azure access key.

   ENGINE storage objectStorage update *> set accessCredentials.azureKey="<NEW-KEY>"

6. Commit the change.

   ENGINE storage objectStorage update *> commit