# Creating KSM App for Rotation

## Overview

Prior to working with Rotation, you need to create a KSM application. For more information on KSM, visit:

{% content-ref url="../../secrets-manager/about" %}
[about](https://docs.keeper.io/en/keeperpam/secrets-manager/about)
{% endcontent-ref %}

## Setup KSM

1. In the Keeper Web Vault or Desktop App user interface, create a shared folder. This shared folder will contain the PAM records you will create as you are working through the [use-case](https://docs.keeper.io/privileged-access-manager/password-rotation/rotation-use-cases.md) guides.
2. Navigate to the "Secret Managers" tab on the left and click on "Create Application" to create a KSM application
3. In the prompted window:
   * Enter the name of your KSM application
   * Choose the shared folder you have created in Step 1
   * Set the Record Permissions for Application to "Can Edit"
4. Click on "Generate Access Token" and then click on "OK"

{% hint style="info" %}
You can safely ignore the first One-Time Access Token generated for the newly created KSM application. When creating a Keeper Gateway device, a different One-Time Access Token will be created.
{% endhint %}

<figure><img src="https://762006384-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MJXOXEifAmpyvNVL1to%2Fuploads%2FGfrKhg3EYK2mAtfmsq1x%2FScreenshot%202023-05-01%20at%2011.37.56%20AM.jpg?alt=media&#x26;token=21236241-e0f2-4b54-b7dd-9f3cea8ab53c" alt=""><figcaption><p>Create a KSM Application</p></figcaption></figure>