# Quick Start: Sandbox

<figure><img src="/files/mhocQBbuxonk2h4hLnBp" alt=""><figcaption></figcaption></figure>

## Quick Start Wizard

To learn some KeeperPAM basics, we have created a wizard that is integrated into the Vault. If you select the Docker install method, this wizard will create all the necessary vault records, configurations and a customized Docker Compose file for quickly standing up a sandbox demo environment in less than 2 minutes.

{% stepper %}
{% step %}

### Activate KeeperPAM

* Login to the Admin Console in your region:

<table><thead><tr><th>Region</th><th width="412">URL</th></tr></thead><tbody><tr><td><strong>US</strong></td><td><a href="https://keepersecurity.com/console">https://keepersecurity.com/console</a></td></tr><tr><td><strong>EU</strong></td><td><a href="https://keepersecurity.eu/console">https://keepersecurity.eu/console</a></td></tr><tr><td><strong>AU</strong></td><td><a href="https://keepersecurity.com.au/console">https://keepersecurity.com.au/console</a></td></tr><tr><td><strong>JP</strong></td><td><a href="https://keepersecurity.jp/console">https://keepersecurity.jp/console</a></td></tr><tr><td><strong>GOV</strong></td><td><a href="https://govcloud.keepersecurity.us/console">https://govcloud.keepersecurity.us/console</a></td></tr></tbody></table>

* Under **Admin** > **Roles**, create a new role for PAM or modify an existing role
* Go to **Enforcement Policies** and open the "**Privilege Access Manager**" section.
* Enable all the PAM enforcement policies
* Ensure you are assigned to this role
  {% endstep %}

{% step %}

### Run the New Gateway Wizard

* Login to the [Keeper Vault](https://keepersecurity.com/vault)
* Click on **Create New** > **Gateway**
* Enter a name for the project, such as "**My Infrastructure Demo**"
* Select **Docker** for the gateway
* Select "**Create with example records**"
* Click **Next**
* After the wizard is finished, run the provided installer.
  {% endstep %}

{% step %}

### Test some PAM features

* You can now instantly connect to any of the resources by clicking "Launch" from the record detail view.
* The MySQL account, SSH password and SSH key can be rotated by clicking "Rotate" from the record detail within the Users folder.
* Note: Remote Browser Isolation won't work on some ARM processors
  {% endstep %}
  {% endstepper %}

<figure><img src="/files/n193ie2BepxgP8hgSFD0" alt=""><figcaption><p>Create a Sandbox</p></figcaption></figure>

### Records Created

The wizard will create the following in your vault:

* A folder containing Resources and Users in separate shared folders
* A MySQL database
* A Linux machine with VNC connection to the desktop UI
* A Linux machine with SSH connection using an SSH Key
* A Linux machine with SSH connection using a password
* A Linux machine with RDP connection to the desktop UI
* A Remote Browser Isolation session to bing.com
* A Secrets Manager Application and PAM Configuration with all PAM features enabled
* A Keeper Gateway ready to initialize

{% hint style="warning" %}
The sandbox virtual machines created by the “example records” are for learning and demonstration only.
{% endhint %}

### Quick Start Video

We've created a helpful Keeper 101 video to set up your sandbox environment:

{% embed url="<https://vimeo.com/1053833331>" %}

### Screenshots

Below are screenshots of the Quick Start Wizard from start to finish.

<figure><img src="/files/W9BVZeurowp4NezyEyvr" alt=""><figcaption><p>Create a Gateway</p></figcaption></figure>

<figure><img src="/files/8gApStffSPffCovXCEBZ" alt=""><figcaption><p>Creating the New Project and Gateway</p></figcaption></figure>

<figure><img src="/files/Ae9Hv3jqoo47ptQnUQkW" alt=""><figcaption><p>Building the Gateway</p></figcaption></figure>

<figure><img src="/files/zpTMIUgPjMuJYW0jsqSr" alt=""><figcaption><p>Install the Gateway with the provided command</p></figcaption></figure>

<figure><img src="/files/NkbG3ViQgcCEVpoDNLbc" alt=""><figcaption><p>Docker running the Gateway and Sandbox Infrastructure</p></figcaption></figure>

<figure><img src="/files/IVLAVpWnWA5XMgCtzbf1" alt=""><figcaption><p>SSH Machine Example</p></figcaption></figure>

<figure><img src="/files/eTUJbIaZ93K5x9uMeyb1" alt=""><figcaption><p>Launching a Connection</p></figcaption></figure>

<figure><img src="/files/wnxoTS9AgWbzgh2RUetM" alt=""><figcaption><p>Connecting to a Linux machine with SSH</p></figcaption></figure>

<figure><img src="/files/jpkM93rtl70fvmDOzX0x" alt=""><figcaption><p>Connecting to a virtual Linux machine over VNC</p></figcaption></figure>

<figure><img src="/files/9hsDnLFbcaZZ8yj2BXSD" alt=""><figcaption><p>Connecting to a web application</p></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.keeper.io/en/keeperpam/privileged-access-manager/quick-start-sandbox.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.