1# Key Vault Certificates — Rust SDK Quick Reference
2 
3> Condensed from **azure-keyvault-certificates-rust**. Full patterns
4> (certificate policies, import, lifecycle management)
5> in the **azure-keyvault-certificates-rust** plugin skill if installed.
6 
7## Install
8cargo add azure_security_keyvault_certificates azure_identity
9 
10## Quick Start
11```rust
12use azure_identity::DeveloperToolsCredential;
13use azure_security_keyvault_certificates::CertificateClient;
14let credential = DeveloperToolsCredential::new(None)?;
15let client = CertificateClient::new("https://<vault>.vault.azure.net/", credential.clone(), None)?;
16```
17 
18## Best Practices
19- Use Entra ID auth — `DeveloperToolsCredential` for dev
20- Use managed certificates — auto-renewal with supported issuers
21- Set proper validity period — balance security and maintenance
22- Use certificate policies — define renewal and key properties
23- Monitor expiration — set up alerts for expiring certificates
24- Enable soft delete — required for production vaults
25