ARTESCA Post-Installation Guidelines

The following guidelines apply to the ARTESCA software, virtual, and hardware appliances.

At a high level, the following steps are recommended:

  1. Change Default Operating System Passwords

  2. Log In to the ARTESCA UI

  3. Activate the ARTESCA License

  4. Configure Alerting Notifications

  5. Configure Certificates

  6. Set Up Identity Management

  7. Set Up Partner Applications

Change Default Operating System Passwords

Note

Proceed with the following if you have not already changed the default operating system passwords during the installation.

The ARTESCA OS provides two users with a respective default and insecure password:

  • An artesca-os user with the default password scality.

  • A root user with the default password scalityadmin.

Warning

To ensure the security of your ARTESCA OS, you must log in with these users at least once to update the password.

Refer to Change Password for more information on how to change your passwords.

Once ARTESCA is installed, you cannot SSH as the root user. To log in as the root user, connect directly to the server (physically or using an IPMI console). You must use the root user only on Scality support requests.

Log In to the ARTESCA UI

  1. Using the console, retrieve the URL for the management UI.

    [artesca-os@bootstrap ~]$

    sudo salt-call metalk8s_network.get_control_plane_ingress_endpoint

    local:
    <management ui url>

  2. Copy the <management ui url> from the console.

  3. Open your web browser and paste the <management ui url> into the address bar.

    You are redirected to the following page.

  4. Enter the default credentials (scality / password) to log in to the console.

  5. Accept the License and Terms of use.

  6. Update your password and click Submit.

You are successfully logged in to the management UI and can proceed with the different procedures.

Activate the ARTESCA License

After the initial ARTESCA installation, the system does not have a valid license.

Follow the Missing License procedure to request a valid license from your reseller or the Scality Sales Operations team. From the ARTESCA UI, you can view and manage your license plan by clicking your username on the top right, and selecting License. Once received, activate your product instance using the provided license key.

Configure Alerting Notifications

By default, the alerts generated by ARTESCA are displayed only in the ARTESCA UI. This means that you need to log in to the UI to see the alerts.

However, you can configure ARTESCA to send alerts to an email address.

For information on how to configure alert notifications by email, refer to Configuring Alert Notification.

Configure Certificates

The ARTESCA S3 endpoint is exposed through HTTPs. For security reasons, you should either replace the S3 endpoint certificates or accept the ARTESCA self signed root CA on your client application.

For more information on managing certificates, refer to Manage Ingress Certificate.

Set Up Identity Management

During installation, the first ARTESCA user has been set up to enable you to start working with ARTESCA.

You can chose to manage your ARTESCA users locally or manage them through a federated identity provider from the list of identity providers available for ARTESCA. Currently, only LDAP is supported.

  • For more information on ARTESCA user roles and how to create them, refer to User Management.

  • If you want to manage your users through a federated identity provider, refer to LDAP Integration.

You can also chose to enable Multi-Factor Authentication for reinforced security. If this is the case, refer to Configure Multi-Factor Authentication.

Set Up Partner Applications

On first login, as no account exists, the following connector page displays.

From there, you can select the partner application that you want to connect to ARTESCA.

Depending on the selected partner application, the configuration can be performed automatically —using a startup assistant— or manually.

For automatic configurations, once you select the partner application and click Continue to assistant, the startup assistant dialog box displays.

Find detailed information concerning partner applications and how to work with them in the Partner Applications section or click the Learn more link on the respective partner application.

For manual configurations, once you select the partner application and click Continue to create account, the Create New Account dialog box displays.

Refer to Create an Account for more information.

If you do not want to configure a partner application, click Skip. You will be re-directed to the Overview page.

You can always configure it later by clicking Start ISV Connector from:

  • The Accounts page.

  • The Data Browser page.

    Note

    This option is only available if you have already created an account.