Bootstrapping EverTrust Stream

Installing a bootstrap certificate

Access the server with an account with administrative privileges;

Start the Stream configuration utility by running:

# /opt/stream/sbin/stream-config

In the main menu, select 'NGINX':

NGINX Config Menu

In the NGINX menu, select 'BOOTSTRAP':

NGINX Config Menu

Specify the DNS Name of the Stream server (the same that you used as Stream hostname previously):

Bootstrap certificate menu

The self-signed certificate is going to be generated and automatically installed for Nginx to use directly:

Bootstrap certificate menu
This certificate is meant to be used to bootstrap Stream and should be replaced as quickly as possible as it is highly unsecured.

Starting the services

Assuming that all prior configuration operations have been performed as documented in the installation guide and that a bootstrap certificate has been installed as explained in the previous section, the services must be started:

  1. Access the server with an account with administrative privileges;

  2. Start the stream service with the following command:

    # systemctl start stream
  3. Verify the NGINX configuration with the following command:

    # nginx -t
  4. Restart the NGINX service with the following command:

    # systemctl restart nginx

Retrieving initial password

For the first log-in, you must find the administrator password in the /opt/stream/var/run/adminPassword file.

The default administration login is administrator.

Accessing the Stream Web Interface

  1. Launch a web browser;

  2. Browse to https://[IP or DNS Name of the Stream component]/ui#:

  3. When prompted with a security issue, click on the button to accept the risks and proceed anyway. This alert is raised by the use of the self-signed certificate.

    Stream Configuration Login Screen
  4. Specify the default administration credentials and hit the 'Login' button:

    Stream Configuration Web Interface
It is highly recommended to delete the adminPassword file from your machine once you saved it somewhere safe.