1. Access the Vault UI: Open your web browser and navigate to the Vault UI's URL. It should be something like https://:8200/ui/.

2. Initialize the Vault: If this is the first time you're using Vault, you'll need to initialize it. Set the number of key shares and the key threshold. Key shares are the total number of parts the master key is split into, while the key threshold is the minimum number of parts required to unseal the Vault. For example, you can set key shares to 5 and the key threshold to 3. Click on the "Initialize" button on the welcome page.

3. Download the unseal keys and the initial root token: After initializing the Vault, you'll be provided with a set of unseal keys and an initial root token. Make sure to securely store this information, as it's required to unseal and authenticate with the Vault.

4. Unseal the Vault: You'll need to provide the required number of unseal keys (matching the key threshold) to unseal the Vault. Click on "Continue to Unseal" and enter the unseal keys one by one.

5. Log in to Vault: Once the Vault is unsealed, you'll be redirected to the login page. Select Token method of authentication and enter the initial root token you saved earlier and click "Sign In."

6. Create a secret engine: Now that you're logged in, click on the "Enable new engine" button on the right side.

Select Generic KV type and click next.

Enter a path for the secret engine, and make note of it. You will need to provide it later during the MGS setup. Keep Maximum number of versions 0 as defaulted. Click on Enable Engine.

7. Create a secret: Select your newly created Secret engine (After creating engine you will be automatically redirected on this page)

To create a new secret, click the "Create secret" button.

You'll be asked to provide a path for the secret, you will also need this path during the MGS setup. In the ?Secret data? section put ?privateKey? in the ?key? field, and your private key in the value field. Click ?Save? button.