# Create a Master Encryption Key and Store in Azure Key Vault

Prerequisites

Before continuing, make sure you've completed the steps in the guide to set up an Azure Managed HSM:\
[Step-by-Step Guide for Setting Up an Encryption Key Provider with Azure](/fenixpyre-for-admins/admin-dashboard/key-management/master-encryption-keys/setup-bring-your-own-master-encryption-key-byomek-with-azure/configure-azure-key-vault-as-bring-your-own-key-provider.md)

### Setting up Master Encryption Key with Azure

{% hint style="info" %}
Watch video tutorial [here](#video-tutorial)
{% endhint %}

{% stepper %}
{% step %}
**Log in to the FenixPyre Dashboard**

Use your credentials to access the FenixPyre Dashboard.
{% endstep %}

{% step %}

#### Navigate to Key Management

Go to `Security` → `Key Management`.
{% endstep %}

{% step %}

#### Create a Master Encryption Key

Select `Master Encryption Keys` tab and click on `Add New Master Encryption Key.`
{% endstep %}

{% step %}

#### Select Microsoft Azure from the Key Provider options

<figure><img src="/files/8MX9W3oKVNAh9U3vBpM9" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

#### Select the key provider

From the dropdown, select the Azure Key Provider you have setup.

{% hint style="info" %}
Make sure you have a Azure Key Vault setup as a Key Provider on FenixPyre. [Read more](/fenixpyre-for-admins/admin-dashboard/key-management/master-encryption-keys/setup-bring-your-own-master-encryption-key-byomek-with-azure/configure-azure-key-vault-as-bring-your-own-key-provider.md)
{% endhint %}
{% endstep %}

{% step %}

#### Enter the key details and create the key

* Provide a name for your key.
* Click `Create Key` to proceed.
  {% endstep %}

{% step %}
**Success Confirmation**

A confirmation message will appear indicating successful key creation.

<figure><img src="/files/KfyhzcumicOlJnL2DMXG" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
**Copy and Download the Master Key**

* Copy the master key and download it for safekeeping.
* Enter the key on the next page for verification.

{% hint style="warning" %}
**Important:** FenixPyre does not store the decrypted version of the master key. Please ensure you securely store the key, as it is essential for decrypting your data in the future.
{% endhint %}
{% endstep %}

{% step %}

#### Key Verification

Enter the key in the final step for verification to complete the master key creation process.

<figure><img src="/files/hZBN3rvv0dEIg8Z0bbh8" alt=""><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}

***

### Video Tutorial

{% embed url="<https://www.loom.com/embed/b7edcb1bc29847c69871b752be6b593a?sid=cbe546dd-ee0a-49e4-82d3-3d0e9ea2d427>" %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fenixpyre.com/fenixpyre-for-admins/admin-dashboard/key-management/master-encryption-keys/setup-bring-your-own-master-encryption-key-byomek-with-azure/create-a-master-encryption-key-and-store-in-azure-key-vault.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.