First login and the default password

Last updated

Signing in

1. Browse to the appliance's address (for example http://192.168.1.50). You land on the sign-in page.
2. Enter Email and Password and click Sign In.
3. If the account has two-factor authentication, enter the 6-digit code from your authenticator app (or click Use a recovery code instead).

A new appliance has one account: admin@scada.ink. Its password depends on how the appliance was set up:

Appliance	Admin password
Installed with deploy/install-pi.sh (first install)	A password generated for this appliance alone, in the form xxxxx-xxxxx-xxxxx-xxxxx
Installed before per-appliance passwords existed, or after Reset to Defaults	admin
Development machine, or the Ink U training sandbox	admin

The generated password is shown in two places, and nowhere else:

• At the end of the installer's output, under Admin password. Write it down then.
• On the appliance's own screen, above the console login prompt (with the appliance's address), until someone signs in as admin@scada.ink for the first time. After that first sign-in the notice is removed.

The appliance never stores it in readable form: the API reads it once when it creates the admin account, keeps only a hash, and deletes the file. If it is lost before anyone signs in, read it from the appliance's console screen; after that, use another admin account to reset it under System → Users.

Re-running the installer on an appliance that already has its database changes no passwords. If admin@scada.ink there still uses admin, the installer prints a warning and the API logs one at every start.

Warning: Neither password is forced to change. Change it in the setup wizard, or before the appliance goes on a shared network.

When you sign in as admin@scada.ink and the password is still admin, a notification titled Default password in use appears in the bell: "You're signed in with the default admin password. If this device is reachable from any network, change it now under My Account."

The first-run setup wizard

The first time an admin signs in, a setup wizard opens over the page (it is never shown to other roles). It has eight steps:

Step	What it does	Notes
Admin password	Sets a new password for the account you are signed in with	The note above the fields reads You're signed in with the default password… on an appliance still using admin, or This appliance was given a one-time admin password when it was installed… on one installed with a generated password. New admin password and Confirm password; must meet the password policy (at least 8 characters by default, listed under the field) and both must match. Skip for now moves on without changing it
Site name	Names the appliance: browser tab, sidebar, sender of its email, configuration exports	Save and continue saves it, the same setting as Site Name under System → Settings (up to 80 characters)
Time zone	Sets the appliance's time zone, which shifts, production totals, reports and schedules follow	Pick from the appliance's list; the line below shows this computer's zone for comparison. Same as Timezone on Appliance → System
Email (SMTP)	Mail server for alarm and report email: host, port, encryption (automatic, none, STARTTLS, TLS), username, password, from address	Optional — Skip leaves email unset. Send test sends a test message with what is typed before you save. Same settings as SMTP Email under System → Settings
Users	Adds accounts: First name, Last name, Email, role (admin, editor, operator, viewer), Temporary password → Add user	Add as many as you like; each appears under Added. Passwords must meet the password policy
License	Paste a license key and click Activate	Shows what the key licenses. Skipping leaves the appliance with only the free base set
Features	Switches licensed features on or off	Locked (gray) features need a license that includes them
Finish	Summarizes what you did → Finish setup	Marks the wizard complete for the whole appliance

Skip and Continue both move to the next step; on Site name, Time zone and Email, Skip leaves the setting as it was and Save and continue saves first (an error, such as a time zone the appliance cannot set, shows above the buttons and keeps you on the step). If you close the browser before Finish setup, the wizard opens again at your next sign-in. To run it again later, go to System → Settings, Onboarding card, Replay Onboarding.

Changing a password later

To change your own password:

1. Click your name in the top-right corner to open My Account.
2. Under Change Password, enter your Current password, then the New password and Confirm new password. The rules of the appliance's password policy are listed under the field and ticked off as you type (by default just at least 8 characters).
3. Click Change password.

Your other sessions (another browser, a kiosk you left signed in) are signed out; the one you are using stays signed in. Wrong current passwords count toward the same lockout as failed sign-ins (by default five in a row lock the account for 15 minutes). If the policy forbids reuse, a password you used recently is refused with The new password must not match any of your last N passwords. If your account signs in through an external directory, change the password there instead.

An admin can also set any user's password: open System → Users, click the key icon (Change password) on the user's row, enter New Password and Confirm Password and click Update Password. Every password must meet the policy, wherever it is set. A password set before a rule was tightened still works for signing in until it is changed or expires.

Expired passwords

When the password policy sets an expiry, a correct but expired password does not sign you in. The sign-in screen shows Password expired and asks for a new password (twice), checked against the policy. Change password and sign in saves it and signs you in with it, asking for your two-factor code if your account has one. The screen is good for 10 minutes; after that, sign in again to get a fresh one.

Your account

Click your name in the top-right corner to open My Account. It shows your name and email, lets you change your password, and holds two-factor authentication enrollment, which every role can turn on for their own account.

Staying signed in and signing out

• You stay signed in while you use the browser. After Session Timeout (minutes) (under System → Settings, 60 by default) with no keyboard, mouse or touch use, the session ends and the browser returns to the sign-in page. An administrator can give each role its own timeout under Password Policy & Session Timeouts on the same page; yours then follows your role's.
• However active you are, sign in again at least every 7 days.
• Logout is at the bottom of the sidebar.

Troubleshooting

Symptom	Cause	Fix
Invalid email or password with the default credentials	The password was already changed	Ask whoever set up the appliance; an admin can reset it on the Users page
This account has been disabled. Contact an administrator.	An admin disabled the account	An admin re-enables it on the Users page
That code is not valid. at the two-factor step	Wrong code, or the appliance clock is wrong	Check the clock on System → Appliance; use a recovery code
Returned to the sign-in page mid-shift	The 24-hour sign-in expired	Sign in again
The setup wizard keeps coming back	Finish setup was never clicked	Finish the wizard, even if you skip every step
Too many failed sign-in attempts. Try again in N minutes.	Too many wrong passwords in a row for that email (the policy's lockout)	Wait it out, or ask an admin to restart the API, which clears lockouts
Password must contain … or …at least N characters when setting a password	The password policy	Follow the rules listed under the field
No Change password option for your own account	You are not an admin	Ask an admin to change it on the Users page

See also

• First appliance setup checklist
• Users and Roles
• System Settings
• Navigating the interface