# Microsoft Azure Key Vault Setup 1. Go to your Azure Homepage ([Home - Microsoft Azure](https://portal.azure.com/#home)) 2. In the search field type App Registration, or follow this link
3. Add a new App and name it, to be able to identify it in the future e.g. “MGS Azure Key Vault”.
4. Save the Application (client) ID and Directory (tenant) ID for future usage.
5. Go to Certificates & secrets -> Client Secrets.
6. Click on New client secret, fill in the fields, create, and copy the created secret Value for future usage.
* For the **Name** field, enter a unique identifier for your secret (for example: `hedera-operator-key`).\ \&#xNAN;*You will use this secret name as the “Operator Key Vault Secret” (Secret Id) when configuring the Guardian application.* * For the **Value** field, enter your private key in the following JSON format: ```json { "privateKey": "YOUR_KEY" } ``` Replace `YOUR_KEY` with your actual Hedera private key, copied from HashPack. * Click **Create** to save the secret. 7. Go back to you Azure home page, click on Create a resource
8. Search for Key Vault and click Create.
9. Fill in the required fields and click Review + Create
10. From the Azure home page go to your newly created keyvault -> Access Configuration and select Vault access policy. Click Apply to save changes.
11. Click Go to access policies and then click Create
12. In the Create an access policy dialog, check marks for secret management as bellow, click next
13. In the Principal dialog find and select you App from step 3 (either by name or by client ID), click next.
14. On Application (Optional) Dialog click next, And on the Review and Create dialog click Create.
--- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.guardianservice.io/technical-information/users/mgs-vault/microsoft-azure-key-vault/microsoft-azure-key-vault-setup.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.