---
id: 7802
title: "Extracting Managed Identity Certificates from the Azure Arc Service"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/extracting-managed-identity-certificates-from-azure-arc-service/"
published_at: "2024-08-05T00:00:00Z"
tags: ["cloud", "cloud-security", "azure", "managed-identity", "azure-arc", "certificate-theft"]
phying_url: "https://phying.com/item/7802"
lang: en
---

# Extracting Managed Identity Certificates from the Azure Arc Service

## Summary

Azure Arc stores its System-Assigned Managed Identity certificate on enrolled machines, letting local admins extract it and authenticate as the identity remotely with minimal Entra ID logging.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2024-08-05T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/extracting-managed-identity-certificates-from-azure-arc-service/
- **Phying News:** https://phying.com/item/7802