Quick Start: Sandbox

Get up and running with a pre-configured PAM environment in minutes.

Overview

To help familiarize you with KeeperPAM, a built-in setup wizard is available directly in the Vault.

The wizard will automatically generate all required vault records and configurations, plus a ready-to-use Docker Compose file — so you can spin up a sandbox demo environment in under two minutes.

Launch the Wizard & Set Up Your Sandbox

1

Activate KeeperPAM

1. Login to the Admin Console within your region.

Region	URL
US	https://keepersecurity.com/console
EU	https://keepersecurity.eu/console
AU	https://keepersecurity.com.au/console
JP	https://keepersecurity.jp/console
GOV	https://govcloud.keepersecurity.us/console

1. Under Admin > Roles, create a new role for PAM or modify an existing role.
2. Open Enforcement Policies and select the Privilege Access Manager section.
3. Enable all PAM enforcement policies.
4. Ensure you are assigned to this role.

2

Run the New Gateway Wizard

1. Log in to the Keeper Vault.
2. Click on Create New > Gateway.
3. Enter a name for the project, such as "My Infrastructure Demo".
4. Select Create Shared Folder from the gateway folder selection.

1. Enter a name for the folder that will contain the gateway resources.
2. Select "Create with example records" and click Save.
3. After the wizard is finished, run the provided installer.

3

Explore KeeperPAM in Action

You can now instantly connect to any of the resources by clicking Launch from the record detail view. The MySQL account, SSH password and SSH key can be rotated by clicking Rotate from the record detail within the Users folder.

Please note, Remote Browser Isolation (RBI) won't work on some ARM processors

Records Created

The wizard will automatically create the following records in your vault:

• A folder containing Resources and Users in separate shared folders
• A MySQL database
• A Linux machine with VNC connection to the desktop UI
• A Linux machine with SSH connection using an SSH Key
• A Linux machine with SSH connection using a password
• A Linux machine with RDP connection to the desktop UI
• A Remote Browser Isolation session to bing.com
• A Secrets Manager Application and PAM Configuration with all PAM features enabled
• A Keeper Gateway ready to initialize

The sandbox virtual machines created by the “example records” are for learning and demonstration only.

Quick Start Video

We've created a helpful video to help you set up your sandbox environment:

Quick Start Wizard Screens

The following screenshots walk you through the Quick Start Wizard from start to finish.

Create a gateway

Create a Shared Folder that will contain the gateway resources

Choose "Create with example records"

Building the gateway

Install the gateway with the provided command

Docker running the gateway and sandbox infrastructure

SSH machine example

Launching a connection

Connecting to a Linux machine with SSH

Connecting to a virtual Linux machine over VNC

Connecting to a web application