Use certs saved in the local store to be used in cert-based auth for service principals

[mdddev]

Related command
az login

Is your feature request related to a problem? Please describe.
For service principal based authentcation, I cannot reference a cert via its thumbprint in the computer store. The Az module of pwsh is able to do so:

https://docs.microsoft.com/en-us/powershell/module/az.accounts/connect-azaccount?view=azps-8.2.0

Describe the solution you'd like
az login --service-principal -u appId -certThumbprint cert:\LocalMachine\My\thumbprint

Describe alternatives you've considered
Going back to the Az module of pwsh

[yonzhan]

@jiasli for awareness

[jiasli]

Reading from Windows certificate store is a Windows-specific functionality. As a cross-platform tool, Azure CLI aims to make the same command work everywhere - Windows, Linux, MacOS. That's why only reading from a PEM file certificate is supported.

We will consider this as a feature request and monitor its vote count.

[mdddev]

Thanks @jiasli , much appreciated. Though, Powershell (fka Powershell Core) is also meant to be a cross-platform tool. Still its AZ module does support this feature. My understanding was, that the AZ module and the Azure CLI aim to keep feature-parity. Would be wonderful for the Azure CLI to leverage this also 😎

[Lumute]

Agree this is really needed, I can login with a certificate in the local store just passing the thumbprint with Azure Az Powershell Module and Microsoft Graph PowerShell SDK. Unfortunately no one tool provides management over everything so we have to juggle between multiple tools, it would be really useful if we can login to AZ CLI the same way that already works fine for other tools...

[ay-azara]

Agree with mdddev, feature parity is good and, although cert store is windows specific, it is Microsoft's own OS and where certificates get placed by most tools, it's an integration that makes sense despite being an exception.