Why do I have to specify the certificate version when I use Key Vault?
使用 Key Vault 时，为什么需要指定证书版本？
The purpose is to make it clear to the user what certificate is deployed on their VMs.
If you create a VM and then update your secret in the key vault, the new certificate isn't downloaded to your VMs. But your VMs appear to reference it, and new VMs get the new secret. To avoid this, you're required to reference a secret version.
目的是让用户更清楚地了解其 VM 上部署了哪个证书。
如果创建了 VM，并更新了密钥保管库中的机密，则新证书不会下载到 VM。 但是，VM 看上去像是引用了该证书，并且新 VM 会获取新机密。 若要避免此问题，需要引用一个机密版本。