> For the complete documentation index, see [llms.txt](https://docs.keeper.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.keeper.io/keeperpam/privileged-access-manager/quick-start-sandbox.md).

# Quick Start: Sandbox

<figure><img src="/files/mhocQBbuxonk2h4hLnBp" alt=""><figcaption></figcaption></figure>

## Overview

To help familiarize you with KeeperPAM, a built-in setup wizard is available directly in the Vault.

The wizard will automatically generate all required vault records and configurations, plus a ready-to-use Docker Compose file — so you can spin up a sandbox demo environment in under two minutes.

<figure><img src="/files/irXVDGJGNJKHnZb7yroT" alt=""><figcaption></figcaption></figure>

## Launch the Wizard & Set Up Your Sandbox

{% stepper %}
{% step %}
**Activate KeeperPAM**

1. Login to the Admin Console within your region.

<table><thead><tr><th>Region</th><th width="412">URL</th></tr></thead><tbody><tr><td><strong>US</strong></td><td><a href="https://keepersecurity.com/console">https://keepersecurity.com/console</a></td></tr><tr><td><strong>EU</strong></td><td><a href="https://keepersecurity.eu/console">https://keepersecurity.eu/console</a></td></tr><tr><td><strong>AU</strong></td><td><a href="https://keepersecurity.com.au/console">https://keepersecurity.com.au/console</a></td></tr><tr><td><strong>JP</strong></td><td><a href="https://keepersecurity.jp/console">https://keepersecurity.jp/console</a></td></tr><tr><td><strong>GOV</strong></td><td><a href="https://govcloud.keepersecurity.us/console">https://govcloud.keepersecurity.us/console</a></td></tr></tbody></table>

2. Under **Admin** **>** **Roles**, create a new role for PAM or modify an existing role.
3. Open **Enforcement Policies** and select the **Privilege Access Manager** section.
4. Enable all PAM enforcement policies.
5. Ensure you are assigned to this role.
   {% endstep %}

{% step %}
**Run the New Gateway Wizard**

1. Log in to the [Keeper Vault](https://keepersecurity.com/vault).
2. Click on **Create New** **> Gateway**.
3. Enter a name for the project, such as "My Infrastructure Demo".
4. Select **Create Shared Folder** from the gateway folder selection.

<figure><img src="/files/b0Zb9Lb33F9EbK157N8P" alt=""><figcaption></figcaption></figure>

5. Enter a name for the folder that will contain the gateway resources.&#x20;
6. Select "**Create with example records**" and click **Save.**
7. After the wizard is finished, run the provided installer.

<figure><img src="/files/aRlwoFlgC63gmnN1NVhB" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}
**Explore KeeperPAM in Action**

You can now instantly connect to any of the resources by clicking **Launch** from the record detail view. The MySQL account, SSH password and SSH key can be rotated by clicking **Rotate** from the record detail within the Users folder.

{% hint style="info" %}
Please note, Remote Browser Isolation (RBI) won't work on some ARM processors
{% endhint %}
{% endstep %}
{% endstepper %}

### Records Created

The wizard will automatically create the following records in your vault:

* A folder containing Resources and Users in separate shared folders
* A MySQL database
* A Linux machine with VNC connection to the desktop UI
* A Linux machine with SSH connection using an SSH Key
* A Linux machine with SSH connection using a password
* A Linux machine with RDP connection to the desktop UI
* A Remote Browser Isolation session to bing.com
* A Secrets Manager Application and PAM Configuration with all PAM features enabled
* A Keeper Gateway ready to initialize

{% hint style="warning" %}
The sandbox virtual machines created by the “example records” are for learning and demonstration only.
{% endhint %}

## Quick Start Video

We've created a helpful video to help you set up your sandbox environment:

{% embed url="<https://vimeo.com/1053833331>" %}

## Quick Start Wizard Screens

The following screenshots walk you through the Quick Start Wizard from start to finish.&#x20;

<figure><img src="/files/W9BVZeurowp4NezyEyvr" alt=""><figcaption><p>Create a gateway</p></figcaption></figure>

<figure><img src="/files/b0Zb9Lb33F9EbK157N8P" alt=""><figcaption><p>Create a Shared Folder that will contain the gateway resources </p></figcaption></figure>

<figure><img src="/files/aRlwoFlgC63gmnN1NVhB" alt=""><figcaption><p>Choose "Create with example records"</p></figcaption></figure>

<figure><img src="/files/Ae9Hv3jqoo47ptQnUQkW" alt=""><figcaption><p>Building the gateway</p></figcaption></figure>

<figure><img src="/files/zpTMIUgPjMuJYW0jsqSr" alt=""><figcaption><p>Install the gateway with the provided command</p></figcaption></figure>

<figure><img src="/files/NkbG3ViQgcCEVpoDNLbc" alt=""><figcaption><p>Docker running the gateway and sandbox infrastructure</p></figcaption></figure>

<figure><img src="/files/IVLAVpWnWA5XMgCtzbf1" alt=""><figcaption><p>SSH machine example</p></figcaption></figure>

<figure><img src="/files/eTUJbIaZ93K5x9uMeyb1" alt=""><figcaption><p>Launching a connection</p></figcaption></figure>

<figure><img src="/files/wnxoTS9AgWbzgh2RUetM" alt=""><figcaption><p>Connecting to a Linux machine with SSH</p></figcaption></figure>

<figure><img src="/files/jpkM93rtl70fvmDOzX0x" alt=""><figcaption><p>Connecting to a virtual Linux machine over VNC</p></figcaption></figure>

<figure><img src="/files/9hsDnLFbcaZZ8yj2BXSD" alt=""><figcaption><p>Connecting to a web application</p></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.keeper.io/keeperpam/privileged-access-manager/quick-start-sandbox.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.