> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Guardian key label

> Procedural guide to configure key labels on the Guardian HSM.

Perform the following tasks to configure the key label on the Guardian.

## Create a role

Perform the following steps to create a role on the Guardian:

<Steps>
  <Step>
    Go to **Identity** **Management** > **Roles**, and select **\[ Add ]** at the bottom of the page.
  </Step>

  <Step>
    In the **Info** tab of the **Role** **Editor** window, set the role name, set the **type** to **Application**, and set the number of users required to log in (set this to `1` if you need only a single user).
  </Step>

  <Step>
    In the **Permissions** tab, select the following permissions:

    <table>
      <thead>
        <tr>
          <th><em><strong>Permission</strong></em></th>
          <th><em><strong>Subpermission</strong></em> </th>
        </tr>
      </thead>

      <tbody>
        <tr>
          <td><strong>Keys</strong></td>
          <td>Export</td>
        </tr>
      </tbody>
    </table>
  </Step>

  <Step>
    In the **Advanced** tab, select **Balancer** in the **Allowed Ports** drop-down list.
  </Step>

  <Step>
    Select **\[ OK ]** to finish creating the role.
  </Step>
</Steps>

## Create an identity

Perform the following steps to create an identity:

<Steps>
  <Step>
    Go to **Identity** **Management** > **Identities**, right-click anywhere, and select **Add** > **Client** **Application**.
  </Step>

  <Step>
    In the **Info** tab, set a name for the identity and leave the **storage** **location** as **Application**.
  </Step>

  <Step>
    In the **Assigned** **Roles** tab, select the role you created in the previous section.
  </Step>

  <Step>
    In the **Authentication** tab, select the **API** **Key** **mechanism** and select **\[ Remove ]**. Select **\[ Add ]** and configure a password for the identity. Then, select **\[ OK ]**.
  </Step>
</Steps>

## Configure HSM group

Allocate the correct Key Management group to the HSM group. To do so, follow these steps:

<Steps>
  <Step>
    Right-click on the HSM group that accepts the transaction, select **Settings**, and go to the **Misc** **Settings** tab.
  </Step>

  <Step>
    From the **Key Label Group** drop-down menu, choose the correct Key Management Group (such as **KMES-1**).
  </Step>

  <Step>
    Deselect **Lookup Key Labels** on the Guardian.
  </Step>

  <Step>
    Select **\[ Update Group Settings ]**.
  </Step>

  <Step>
    Select **\[ Finish ]**.
  </Step>
</Steps>