如上所述，@托马斯说，在某些情况下，它将不支持使用二头肌在密钥库中生成证书。
试试下面的代码，看看它是否有效。

param  keyVaultName  string
param  location  string = resourceGroup().location

 
resource  keyVault  'Microsoft.KeyVault/vaults@2021-06-01-preview' = {
name: keyVaultName
location: location
sku : {
name: 'standard'
}
properties: {
    tenantId: subscription().tenantId
    accessPolicies: []
    enabledForDeployment: false
    enabledForDiskEncryption: false
    enabledForTemplateDeployment: false
    enableSoftDelete: false
    enablePurgeProtection: false
    networkAcls: {
        bypass: 'AzureServices'
        defaultAction: 'Allow'
        }
    }
}

resource  certificate  'Microsoft.KeyVault/vaults/certificates@2021-06-01-preview' = {
    parent: keyVault
    name: 'my-certificate'
    properties: {
        certificatePolicy: {
        issuerParameters: {
        name: 'Unknown'
        }
    keyProperties: {
        keyType: 'RSA'
        keySize: 2048
        reuseKey: false
        }
    secretProperties: {
        contentType: 'application/x-pkcs12'
        }
        x509CertificateProperties: {
            subject: 'CN=my-certificate'
            validityInMonths: 12
            }
        }
    }
}