Just thought I’d share this since we spent a lot of time troubleshooting: If you’re trying to use a HSM protected key in an Azure key vault in a government region, there’s a bug in the current ADC software that has an incorrect hardcoded domain suffix. You’ll have to have the key vault in a non government region for now. I heard a beta is coming.