[AutoPR azure-security-keyvault-certificates]-generated-from-SDK Generation - Java-6995116 (#50976)

* Configurations:  'specification/keyvault/data-plane/Certificates/tspconfig.yaml', API Version: 2026-04-01, SDK Release Type: stable, and CommitSHA: '569464e8c8b02ebd1b4d939f899508467528c696' in SpecRepo: 'https://github.com/Azure/azure-rest-api-specs' Pipeline run: https://dev.azure.com/azure-sdk/internal/_build/results?buildId=6995116 Refer to https://eng.ms/docs/products/azure-developer-experience/develop/sdk-release/sdk-release-prerequisites to prepare for SDK release.

* Use stable changelog version for certificates

* Align certificates changelog header with beta package version

* Use stable 2026-04-01 Key Vault Certificates service version

Align generated defaults and customizations, verify sync/async wire versions, include stable platform-managed policy coverage, and renew existing fake import fixtures.

Source-only preparation: mocked builder tests pass; recording publication remains blocked pending recovery and revalidation.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Prepare Key Vault Certificates 4.10.0 stable release for October 27

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Update Key Vault live test recording assets for 2026-04-01

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Align Key Vault performance tests with stable Certificates version

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Refresh stable Key Vault certificate merge recordings

Record both mergeCertificate cases against API 2026-04-01 using native Java 8.
Preserve the existing 94 recordings byte-for-byte and update only the asset pointer.
Validate all 175 certificate tests on native Java 11 with zero skips.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: azure-sdk <azuresdk@microsoft.com>
Co-authored-by: ROHIT SINGHAL <rohitsinghal4u@gmail.com>
Co-authored-by: Rohit Singhal <singhalrohit@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: 5 people

eng/versioning/version_client.txt

@@ -168,7 +168,7 @@ com.azure:azure-search-perf;1.0.0-beta.1;1.0.0-beta.1
 com.azure:azure-security-attestation;1.2.0;1.3.0-beta.1
 com.azure:azure-security-confidentialledger;1.0.38;2.0.2-beta.2
 com.azure:azure-security-keyvault-administration;4.8.3;4.9.0-beta.2
-com.azure:azure-security-keyvault-certificates;4.9.3;4.10.0-beta.2
+com.azure:azure-security-keyvault-certificates;4.9.3;4.10.0
 com.azure:azure-security-keyvault-jca;2.13.0;2.14.0-beta.1
 com.azure:azure-security-test-keyvault-jca;1.0.0;1.0.0
 com.azure:azure-security-keyvault-keys;4.11.3;4.12.0-beta.3

sdk/keyvault/azure-security-keyvault-certificates/CHANGELOG.md

@@ -1,14 +1,21 @@
 # Release History
 
-## 4.10.0-beta.2 (Unreleased)
+## 4.10.0 (2026-10-27)
 
 ### Features Added
 
-### Breaking Changes
+* `models.PlatformManaged` was added
 
-### Bugs Fixed
+#### `models.CertificatePolicy` was modified
 
-### Other Changes
+* `getPlatformManaged()` was added
+* `setPlatformManaged(models.PlatformManaged)` was added
+* `forPlatformManaged(models.PlatformManaged)` was added
+
+#### `CertificateServiceVersion` was modified
+
+* `V2026_03_01_PREVIEW` was added
+* `V2026_04_01` was added and is the default service version.
 
 ## 4.9.3 (2026-10-06)
 

sdk/keyvault/azure-security-keyvault-certificates/assets.json

@@ -2,5 +2,5 @@
   "AssetsRepo": "Azure/azure-sdk-assets",
   "AssetsRepoPrefixPath": "java",
   "TagPrefix": "java/keyvault/azure-security-keyvault-certificates",
-  "Tag": "java/keyvault/azure-security-keyvault-certificates_e04aab094e"
+  "Tag": "java/keyvault/azure-security-keyvault-certificates_9013b99e00"
 }

sdk/keyvault/azure-security-keyvault-certificates/customizations/src/main/java/CertificatesCustomizations.java

@@ -121,7 +121,7 @@ private static void customizeServiceVersion(LibraryCustomization customization)
             .setJavadocComment("The versions of Azure Key Vault Certificates supported by this client library.");
 
         for (String version : Arrays.asList("7.0", "7.1", "7.2", "7.3", "7.4", "7.5", "7.6",
-            "2025-07-01", "2026-03-01-preview")) {
+            "2025-07-01", "2026-03-01-preview", "2026-04-01")) {
             enumDeclaration.addEnumConstant("V" + version.replace('.', '_').replace('-', '_').toUpperCase())
                 .setJavadocComment("Service version {@code " + version + "}.")
                 .addArgument(new StringLiteralExpr(version));
@@ -142,7 +142,7 @@ private static void customizeServiceVersion(LibraryCustomization customization)
             .setType("CertificateServiceVersion")
             .setJavadocComment(new Javadoc(parseText("Gets the latest service version supported by this client library."))
                 .addBlockTag("return", "The latest {@link CertificateServiceVersion}."))
-            .setBody(StaticJavaParser.parseBlock("{ return V2026_03_01_PREVIEW; }"));
+            .setBody(StaticJavaParser.parseBlock("{ return V2026_04_01; }"));
 
         customization.getRawEditor()
             .addFile("src/main/java/com/azure/security/keyvault/certificates/CertificateServiceVersion.java",

sdk/keyvault/azure-security-keyvault-certificates/pom.xml

@@ -12,7 +12,7 @@
 
   <groupId>com.azure</groupId>
   <artifactId>azure-security-keyvault-certificates</artifactId>
-  <version>4.10.0-beta.2</version> <!-- {x-version-update;com.azure:azure-security-keyvault-certificates;current} -->
+  <version>4.10.0</version> <!-- {x-version-update;com.azure:azure-security-keyvault-certificates;current} -->
 
   <name>Microsoft Azure client library for KeyVault Certificates</name>
   <description>This module contains client library for Microsoft Azure KeyVault Certificates.</description>

sdk/keyvault/azure-security-keyvault-certificates/src/main/java/com/azure/security/keyvault/certificates/CertificateServiceVersion.java

@@ -45,7 +45,11 @@ public enum CertificateServiceVersion implements ServiceVersion {
     /**
      * Service version {@code 2026-03-01-preview}.
      */
-    V2026_03_01_PREVIEW("2026-03-01-preview");
+    V2026_03_01_PREVIEW("2026-03-01-preview"),
+    /**
+     * Service version {@code 2026-04-01}.
+     */
+    V2026_04_01("2026-04-01");
 
     private final String version;
 
@@ -67,6 +71,6 @@ public String getVersion() {
      * @return The latest {@link CertificateServiceVersion}.
      */
     public static CertificateServiceVersion getLatest() {
-        return V2026_03_01_PREVIEW;
+        return V2026_04_01;
     }
 }

sdk/keyvault/azure-security-keyvault-certificates/src/main/java/com/azure/security/keyvault/certificates/models/CertificatePolicy.java

@@ -430,8 +430,8 @@ public Boolean isCertificateTransparent() {
      * Get the platform managed certificate configuration.
      *
      * <p><strong>Warning: this property is currently intended for internal (first-party) Key Vault use only.</strong>
-     * It is only populated when the policy was created against the preview service version
-     * {@code 2026-03-01-preview}. Third-party callers should not rely on this property; the underlying
+     * It is populated when the policy uses platform-managed configuration in service version
+     * {@code 2026-04-01}. Third-party callers should not rely on this property; the underlying
      * service contract may change without notice.
      *
      * @return the platform managed certificate configuration.
@@ -444,7 +444,7 @@ public PlatformManaged getPlatformManaged() {
      * Set the platform managed certificate configuration.
      *
      * <p><strong>Warning: this property is currently intended for internal (first-party) Key Vault use only.</strong>
-     * It is exposed under the preview service version {@code 2026-03-01-preview} and is not generally available.
+     * It is exposed in service version {@code 2026-04-01}, but the feature is not generally available.
      * Third-party calls that supply a {@link PlatformManaged} configuration will be rejected by the service.
      * Do not use this setter in production code.
      *
@@ -510,7 +510,7 @@ public static CertificatePolicy getDefault() {
      * that specify them when {@code platformManaged} is set.
      *
      * <p><strong>Warning: this factory is currently intended for internal (first-party) Key Vault use only.</strong>
-     * It targets the preview service version {@code 2026-03-01-preview} and is not generally available. Third-party
+     * It targets service version {@code 2026-04-01}, but the feature is not generally available. Third-party
      * calls will be rejected by the service. Do not use in production code.
      *
      * @param platformManaged the platform-managed certificate configuration.

sdk/keyvault/azure-security-keyvault-certificates/src/main/java/com/azure/security/keyvault/certificates/models/PlatformManaged.java

@@ -17,7 +17,7 @@
  * Properties of the platform managed certificate.
  *
  * <p><strong>Warning: this feature is currently intended for internal (first-party) Key Vault use only.</strong>
- * It is exposed in the preview service version {@code 2026-03-01-preview} and is not generally available.
+ * It is exposed in service version {@code 2026-04-01}, but the feature is not generally available.
  * Third-party calls that supply a {@link CertificatePolicy} configured via
  * {@link CertificatePolicy#forPlatformManaged(PlatformManaged)} will be rejected by the service. The shape
  * accepted under {@link #setMetadata(Map)} and the values accepted for {@link #setCertificateUsage(String)}

sdk/keyvault/azure-security-keyvault-certificates/src/test/java/com/azure/security/keyvault/certificates/CertificateAsyncClientTest.java

@@ -62,6 +62,7 @@
 import java.util.concurrent.atomic.AtomicInteger;
 import java.util.concurrent.atomic.AtomicReference;
 
+import static org.junit.jupiter.api.Assertions.assertArrayEquals;
 import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
 import static org.junit.jupiter.api.Assertions.assertEquals;
 import static org.junit.jupiter.api.Assertions.assertFalse;
@@ -916,8 +917,8 @@ public void importCertificate(HttpClient httpClient, CertificateServiceVersion s
         importCertificateRunner((importCertificateOptions) -> StepVerifier
             .create(certificateAsyncClient.importCertificate(importCertificateOptions))
             .assertNext(importedCertificate -> {
-                assertTrue("931dd8219585752bc915684ca3967974c400de28"
-                    .equalsIgnoreCase(importedCertificate.getProperties().getX509ThumbprintAsString()));
+                assertArrayEquals(ImportCertificateFixture.getThumbprint(),
+                    importedCertificate.getProperties().getX509Thumbprint());
                 assertEquals(importCertificateOptions.isEnabled(), importedCertificate.getProperties().isEnabled());
 
                 // Load the CER part into X509Certificate object

sdk/keyvault/azure-security-keyvault-certificates/src/test/java/com/azure/security/keyvault/certificates/CertificateClientBuilderTest.java

@@ -50,13 +50,18 @@ public void buildSyncClientTest() {
 
     @Test
     public void buildSyncClientUsingDefaultApiVersionTest() {
+        assertEquals("2026-04-01", CertificateServiceVersion.getLatest().getVersion());
         CertificateClient certificateClient = new CertificateClientBuilder().vaultUrl(vaultUrl)
             .credential(new TestUtils.TestCredential())
-            .httpClient(request -> Mono.just(new MockHttpResponse(request, 200)))
+            .httpClient(request -> {
+                assertEquals("api-version=2026-04-01", request.getUrl().getQuery());
+                return Mono.just(new MockHttpResponse(request, 404));
+            })
             .buildClient();
 
         assertNotNull(certificateClient);
         assertEquals(CertificateClient.class.getSimpleName(), certificateClient.getClass().getSimpleName());
+        assertThrows(HttpResponseException.class, () -> certificateClient.getCertificate(certificateName));
     }
 
     @Test
@@ -73,13 +78,18 @@ public void buildAsyncClientTest() {
 
     @Test
     public void buildAsyncClientUsingDefaultApiVersionTest() {
+        assertEquals("2026-04-01", CertificateServiceVersion.getLatest().getVersion());
         CertificateAsyncClient certificateAsyncClient = new CertificateClientBuilder().vaultUrl(vaultUrl)
             .credential(new TestUtils.TestCredential())
-            .httpClient(request -> Mono.just(new MockHttpResponse(request, 200)))
+            .httpClient(request -> {
+                assertEquals("api-version=2026-04-01", request.getUrl().getQuery());
+                return Mono.just(new MockHttpResponse(request, 404));
+            })
             .buildAsyncClient();
 
         assertNotNull(certificateAsyncClient);
         assertEquals(CertificateAsyncClient.class.getSimpleName(), certificateAsyncClient.getClass().getSimpleName());
+        assertThrows(HttpResponseException.class, () -> certificateAsyncClient.getCertificate(certificateName).block());
     }
 
     @Test