Once the key vaults are created, we will have to upload the private keys of Contoso and ShipAnyWhere to their respective key vaults.

In a key vault, you will have the option to either import a key or generate a new key. Since we have already created a certificate in the previous steps, we will use the Import option. In the File Upload box, select the Contoso.pfx private key file:

Similarly, upload the ShipAnyWhere.pfx file to ShipAnyWhere-KeyVault.