diff --git a/weed/s3api/auth_credentials.go b/weed/s3api/auth_credentials.go
index 6c47005ba..11c4a105e 100644
--- a/weed/s3api/auth_credentials.go
+++ b/weed/s3api/auth_credentials.go
@@ -32,7 +32,6 @@ import (
 
 	// Import KMS providers to register them
 	_ "github.com/seaweedfs/seaweedfs/weed/kms/aws"
-	// _ "github.com/seaweedfs/seaweedfs/weed/kms/azure"  // TODO: Fix Azure SDK compatibility issues
 	_ "github.com/seaweedfs/seaweedfs/weed/kms/gcp"
 	_ "github.com/seaweedfs/seaweedfs/weed/kms/local"
 	_ "github.com/seaweedfs/seaweedfs/weed/kms/openbao"
diff --git a/weed/s3api/kms_azure.go b/weed/s3api/kms_azure.go
new file mode 100644
index 000000000..ab5f731ea
--- /dev/null
+++ b/weed/s3api/kms_azure.go
@@ -0,0 +1,8 @@
+//go:build azurekms
+
+package s3api
+
+// Import the Azure KMS provider so its init() registers it with
+// weed/kms. The provider is gated behind the `azurekms` build tag so that
+// default builds do not pull in the Azure SDK.
+import _ "github.com/seaweedfs/seaweedfs/weed/kms/azure"