[KeyVault Certificates] Expose PlatformManaged from public namespace

sdk/keyvault/azure-keyvault-certificates/CHANGELOG.md

@@ -4,6 +4,9 @@
 
 ### Features Added
 
+- Added support for service API version `2026-03-01-preview`
+- Added `PlatformManaged` model and `platform_managed` keyword argument / property on `CertificatePolicy`, exposed from the public `azure.keyvault.certificates` namespace
+
 ### Breaking Changes
 
 ### Bugs Fixed

sdk/keyvault/azure-keyvault-certificates/_metadata.json

@@ -1,10 +1,10 @@
 {
-  "apiVersion": "2025-07-01",
+  "apiVersion": "2026-03-01-preview",
   "apiVersions": {
-    "KeyVault": "2025-07-01"
+    "KeyVault": "2026-03-01-preview"
   },
-  "commit": "80cf521033f9499c3c86305d11c7de6451e796e5",
+  "commit": "44729a46b902922d8f50a383573f9c6641ce8e74",
   "repository_url": "https://github.com/Azure/azure-rest-api-specs",
   "typespec_src": "specification/keyvault/data-plane/Certificates",
-  "emitterVersion": "0.61.2"
+  "emitterVersion": "0.62.1"
 }

sdk/keyvault/azure-keyvault-certificates/apiview-properties.json

@@ -31,6 +31,7 @@
         "azure.keyvault.certificates._generated.models.KeyVaultErrorError": "KeyVaultError.error.anonymous",
         "azure.keyvault.certificates._generated.models.LifetimeAction": "KeyVault.LifetimeAction",
         "azure.keyvault.certificates._generated.models.OrganizationDetails": "KeyVault.OrganizationDetails",
+        "azure.keyvault.certificates._generated.models.PlatformManaged": "KeyVault.PlatformManaged",
         "azure.keyvault.certificates._generated.models.SecretProperties": "KeyVault.SecretProperties",
         "azure.keyvault.certificates._generated.models.SubjectAlternativeNames": "KeyVault.SubjectAlternativeNames",
         "azure.keyvault.certificates._generated.models.Trigger": "KeyVault.Trigger",
@@ -94,5 +95,6 @@
         "azure.keyvault.certificates._generated.aio.KeyVaultClient.purge_deleted_certificate": "KeyVault.purgeDeletedCertificate",
         "azure.keyvault.certificates._generated.KeyVaultClient.recover_deleted_certificate": "KeyVault.recoverDeletedCertificate",
         "azure.keyvault.certificates._generated.aio.KeyVaultClient.recover_deleted_certificate": "KeyVault.recoverDeletedCertificate"
-    }
+    },
+    "CrossLanguageVersion": "62e5a7e522bd"
 }

sdk/keyvault/azure-keyvault-certificates/azure/keyvault/certificates/__init__.py

@@ -23,7 +23,8 @@
     IssuerProperties,
     LifetimeAction,
     KeyVaultCertificate,
-    KeyVaultCertificateIdentifier
+    KeyVaultCertificateIdentifier,
+    PlatformManaged
 )
 from ._shared.client_base import ApiVersion
 
@@ -49,7 +50,8 @@
     "CertificateContentType",
     "WellKnownIssuerNames",
     "CertificateIssuer",
-    "IssuerProperties"
+    "IssuerProperties",
+    "PlatformManaged"
 ]
 
 from ._version import VERSION

sdk/keyvault/azure-keyvault-certificates/azure/keyvault/certificates/_generated/_client.py

@@ -7,8 +7,8 @@
 # --------------------------------------------------------------------------
 
 from copy import deepcopy
+import sys
 from typing import Any, TYPE_CHECKING
-from typing_extensions import Self
 
 from azure.core import PipelineClient
 from azure.core.pipeline import policies
@@ -18,6 +18,11 @@
 from ._operations import _KeyVaultClientOperationsMixin
 from ._utils.serialization import Deserializer, Serializer
 
+if sys.version_info >= (3, 11):
+    from typing import Self
+else:
+    from typing_extensions import Self  # type: ignore
+
 if TYPE_CHECKING:
     from azure.core.credentials import TokenCredential
 
@@ -30,9 +35,10 @@ class KeyVaultClient(_KeyVaultClientOperationsMixin):
     :type vault_base_url: str
     :param credential: Credential used to authenticate requests to the service. Required.
     :type credential: ~azure.core.credentials.TokenCredential
-    :keyword api_version: The API version to use for this operation. Known values are "2025-07-01".
-     Default value is "2025-07-01". Note that overriding this default value may result in
-     unsupported behavior.
+    :keyword api_version: The API version to use for this operation. Known values are
+     "2026-03-01-preview" and None. Default value is None. If not set, the operation's default API
+     version will be used. Note that overriding this default value may result in unsupported
+     behavior.
     :paramtype api_version: str
     """
 

sdk/keyvault/azure-keyvault-certificates/azure/keyvault/certificates/_generated/_configuration.py

@@ -26,14 +26,15 @@ class KeyVaultClientConfiguration:  # pylint: disable=too-many-instance-attribut
     :type vault_base_url: str
     :param credential: Credential used to authenticate requests to the service. Required.
     :type credential: ~azure.core.credentials.TokenCredential
-    :keyword api_version: The API version to use for this operation. Known values are "2025-07-01".
-     Default value is "2025-07-01". Note that overriding this default value may result in
-     unsupported behavior.
+    :keyword api_version: The API version to use for this operation. Known values are
+     "2026-03-01-preview" and None. Default value is None. If not set, the operation's default API
+     version will be used. Note that overriding this default value may result in unsupported
+     behavior.
     :paramtype api_version: str
     """
 
     def __init__(self, vault_base_url: str, credential: "TokenCredential", **kwargs: Any) -> None:
-        api_version: str = kwargs.pop("api_version", "2025-07-01")
+        api_version: str = kwargs.pop("api_version", "2026-03-01-preview")
 
         if vault_base_url is None:
             raise ValueError("Parameter 'vault_base_url' must not be None.")