The first step is to prepare the environment for the sample. This involves logging in to Azure portal, selecting an appropriate subscription, and then creating a new Azure Resource Group and a new Azure Key Vault resource.

1. Execute the Login-AzureRmAccount command to log in to Azure. It will prompt for credentials in a new window.
2. After a successful login, if there are multiple subscriptions available for the login ID provided , they will all be listed. It is important to select an appropriate subscription. This can be done by executing the Set-AzureRmContent cmdlet:

Set-AzureRmContext -Subscription xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx

3. Create a new resource group in your preferred location. In this case, the name of the resource group is IntegrationDemo and it is created in the West Europe region:

New-AzureRmResourceGroup -Name IntegrationDemo -Location "West Europe" -Verbose

4. Create a new Azure Key Vault. The name of the vault in this case is keyvaultbook, and it is enabled for deployment, template deployment, disk encryption, soft delete, and purge protection:

New-AzureRmKeyVault -Name keyvaultbook -ResourceGroupName IntegrationDemo -Location "West Europe" -EnabledForDeployment -EnabledForTemplateDeployment -EnabledForDiskEncryption -EnableSoftDelete -EnablePurgeProtection -Sku Standard -Verbose

The preceding command, when executed successfully, will create a new Azure Key Vault. The next step is to provide access to a service principal on the key vault.