Microsoft Technology Licensing, LLC

Pavel Zakharov

Mark Eugene Russinovich

Kahren Tevosyan

Ashok Chandrasekaran

Chetan S Shankar

Brian Scott Lounsberry

Chandan Rama Reddy

Vyom P Munshi

Abhishek Pratap Singh Chauhan

Chuang Wang

Various methods and systems are provided for autonomous orchestration of secrets renewal and distribution. A secrets management service ('SMS') can be utilized to store, renew and distribute secrets in a distributed computing environment. The secrets are initially deployed, after which, SMS can automatically renew the secrets according to a specified rollover policy, and polling agents can fetch updates from SMS. In various embodiments, SMS can autonomously rollover client certificates for authentication of users who access a security critical service, autonomously rollover storage account keys, track delivery of updated secrets to secrets recipients, deliver secrets using a secure blob, and/or facilitate autonomous rollover using secrets staging. In some embodiments, a service is pinned to the path where the service's secrets are stored. In this manner, secrets can be automatically renewed without any manual orchestration and/or the need to redeploy services.

Autonomous secrets renewal and distribution

Growing community of inventors

Sammamish, WA, United States of America

Pavel Zakharov