To create the Key Vault from the Azure portal, take the following steps:

1. Navigate to the Azure portal by opening https://portal.azure.com.
2. From the left menu, click Create a resource. In the search box, type Key Vault and create a new Key Vault.
3. Fill in the following values:
   • Subscription: Select the same subscription that you used for the Deploying a Windows VM from PowerShell demo.
   • Resource group: Select the resource group name you created in the previous demo, which is PacktVMResourceGroup.
   • Key Vault Name: Type PacktEncryptionVault.
   • Region: Select East US.
   • Pricing Tier: Select Standard.
4. Click Review + create and Create.

Now that the Key Vault is in place, we can encrypt the disk.