Skip to content
cccskills
FreePublished on GitHub

azure-confidential-ledger

Expert knowledge for Azure Confidential Ledger development including troubleshooting, decision making, security, integrations & coding patterns, and deployment. Use when configuring ACL auth/attestation, integrating with Blob/Cosmos, using MST payloads, or deploying via ARM/Terraform, and other Azure Confidential Ledger related development tasks. Not for Azure Confidential Computing (use azure-confidential-computing), Azure Key Vault (use azure-key-vault), Azure Dedicated HSM (use azure-dedicated-hsm), Azure Payment Hsm (use azure-payment-hsm).

The English summary is being prepared. Showing the original description.

Works withAzureTerraform
See how to install

Files included (1)

  • SKILL.md6.5 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Azure Confidential Ledger Skill

This skill provides expert guidance for Azure Confidential Ledger. Covers troubleshooting, decision making, security, integrations & coding patterns, and deployment. It combines local quick-reference content with remote documentation fetching capabilities.

How to Use This Skill

IMPORTANT for Agent: Use the Category Index below to locate relevant sections. For categories with line ranges (e.g., L35-L120), use read_file with the specified lines. For categories with file links (e.g., [security.md](security.md)), use read_file on the linked reference file

IMPORTANT for Agent: If metadata.generated_at is more than 3 months old, suggest the user pull the latest version from the repository. If mcp_microsoftdocs tools are not available, suggest the user install it: Installation Guide

This skill requires network access to fetch documentation content:

  • Preferred: Use mcp_microsoftdocs:microsoft_docs_fetch with query string from=learn-agent-skill. Returns Markdown.
  • Fallback: Use fetch_webpage with query string from=learn-agent-skill&accept=text/markdown. Returns Markdown.

Category Index

CategoryLinesDescription
TroubleshootingL33-L38Diagnosing and resolving Microsoft Signing Transparency (MST) ledger verification issues, plus steps to verify ledger integrity and inspect individual ledger entries.
Decision MakingL39-L44Choosing between ACL Explorer tools for viewing/querying ledgers, and guidance on migrating applications and data from Managed CCF to Azure Confidential Ledger
SecurityL45-L57Auth, attestation, identity, and access control for Confidential Ledger: Entra ID setup, app registration, RBAC, cert-based users, client certs, node quote verification, and deployment security.
Integrations & Coding PatternsL58-L67Patterns and examples for integrating ACL with Blob Storage, Power Automate, Cosmos DB, organizing ledger data, designing MST payloads/claims, and writing JavaScript user-defined functions.
DeploymentL68-L72How to deploy and provision Azure Confidential Ledger instances using ARM templates or Terraform, including required parameters and configuration steps.

Troubleshooting

TopicURL
Troubleshoot Microsoft’s Signing Transparency Ledger verification issueshttps://learn.microsoft.com/en-us/azure/confidential-ledger/microsoft-signing-transparency-troubleshoot
Verify MST ledger integrity and inspect entrieshttps://learn.microsoft.com/en-us/azure/confidential-ledger/microsoft-signing-transparency-verify-signatures

Decision Making

TopicURL
Choose between Azure Confidential Ledger Explorer toolshttps://learn.microsoft.com/en-us/azure/confidential-ledger/ledger-explorer-concepts
Migrate from Managed CCF to Azure Confidential Ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/managed-confidential-consortium-framework-migration

Security

TopicURL
Authenticate and attest Azure Confidential Ledger nodes securelyhttps://learn.microsoft.com/en-us/azure/confidential-ledger/authenticate-ledger-nodes
Configure Microsoft Entra authentication for Azure confidential ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/authentication-azure-ad
Create and configure client certificates for Confidential Ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/create-client-certificate
Manage Entra token-based users and roles in Confidential Ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/manage-azure-ad-token-based-users
Manage certificate-based users and roles in Confidential Ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/manage-certificate-based-users
Register Confidential Ledger applications in Microsoft Entra IDhttps://learn.microsoft.com/en-us/azure/confidential-ledger/register-application
Secure Azure Confidential Ledger deployments and accesshttps://learn.microsoft.com/en-us/azure/confidential-ledger/secure-confidential-ledger
Implement advanced UDFs with RBAC in Confidential Ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/user-defined-endpoints
Verify node quotes and establish trust in Confidential Ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/verify-node-quotes

Integrations & Coding Patterns

TopicURL
Integrate Blob Storage digests with Azure Confidential Ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/create-blob-managed-app
Integrate Azure confidential ledger with Power Automate and Cosmos DBhttps://learn.microsoft.com/en-us/azure/confidential-ledger/create-power-automate-workflow
Organize and access data in Azure confidential ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/data-organization
Design MST payloads, claims, and auditing workflowshttps://learn.microsoft.com/en-us/azure/confidential-ledger/microsoft-signing-transparency-usage
Run user-defined functions in Azure Confidential Ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/server-side-programming
Create simple JavaScript UDFs in Confidential Ledgerhttps://learn.microsoft.com/en-us/azure/confidential-ledger/user-defined-functions

Deployment

TopicURL
Deploy Azure Confidential Ledger via ARM templatehttps://learn.microsoft.com/en-us/azure/confidential-ledger/quickstart-template
Provision Azure Confidential Ledger using Terraformhttps://learn.microsoft.com/en-us/azure/confidential-ledger/quickstart-terraform

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Expert knowledge for Azure Active Directory B2C development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when building B2C user flows/custom policies, configuring IdPs/MFA, securing APIs, automating CI/CD, or monitoring with Sentinel, and other Azure Active Directory B2C related development tasks. Not for Azure Role-based access control (use azure-rbac), Azure Information Protection (use azure-information-protection), Azure Security (use azure-security), Azure Sentinel (use azure-sentinel).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

Expert knowledge for Azure Advisor development including best practices, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when managing Advisor alerts, digests, recommendation states, Resource Graph queries, or RBAC access, and other Azure Advisor related development tasks. Not for Cost Management (use azure-cost-management), Azure Monitor (use azure-monitor), Azure Policy (use azure-policy), Azure Security (use azure-security).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

Expert knowledge for Azure AI Vision development including decision making, limits & quotas, configuration, integrations & coding patterns, and deployment. Use when using Image Analysis, Read OCR containers, smart-crop thumbnails, background removal, or video frame analysis, and other Azure AI Vision related development tasks. Not for Azure AI Custom Vision (use azure-custom-vision), Azure AI Video Indexer (use azure-video-indexer), Azure AI Document Intelligence (use azure-document-intelligence), Azure AI Immersive Reader (use azure-immersive-reader).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when deploying AKS Edge/Hybrid with Arc, Azure Local, GitOps, IoT/OPC/ONVIF, or Key Vault-integrated workloads, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

Expert knowledge for Azure Analysis Services development including troubleshooting. Use when resolving server connectivity, firewall/VNet, DNS, client connection, or network error issues, and other Azure Analysis Services related development tasks. Not for Azure Synapse Analytics (use azure-synapse-analytics), Azure SQL Database (use azure-sql-database), Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

Expert knowledge for Azure Anyscale On Azure development including limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when registering AKS as Anyscale clouds, wiring ACR images, enabling Private Link/RBAC, ARM-based deployments, or region checks, and other Azure Anyscale On Azure related development tasks. Not for Azure Databricks (use azure-databricks), Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure Machine Learning (use azure-machine-learning), Azure HDInsight (use azure-hdinsight).

The English summary is being prepared. Showing the original description.

MicrosoftDocs/Agent-Skills790Updated Oct 19, 2026

See all skills by MicrosoftDocs

Report a problem with this skill