Administration Overview
Access the Cloudpath Administration tab to manage system-related operations, using links in the following sections:
Administrators
During the initial account setup, Cloudpath sets up an administrator account using the company information provided during the setup. By default, there is also an Administrator Group, which allows administrative access to the Admin UI using credentials from the configured authentication server. This allows users who belong to a specific group to access Cloudpath.
Manage administrator access to the Cloudpath Admin UI from .
Cloudpath supports the following Administrator Roles:
- CA Administrator - Allows full configuration access to the Administrative UI. This administrator role can manage all administrative users.
- Administrator - Allows full configuration access to the Administrative UI, except for Certificate Authorities. This administrator can manage Administrator and Viewer administrative users.
- Viewer - Allows view-only access to Enrollment, User, and Certificate records on the Dashboard, the enrollment Workflow, and the Documentation and Licensing pages. This administrator cannot manage other administrative users.
Company Information
Company Information - Used within the URL for enrollments and sponsorships, and included in the onboard CAs.
System Services
Navigate to to restart or view logs for the application server, web server, configure email or SMS servers, or start up a support tunnel.
- Web Server - Download the Apache Server access and error logs from the Web Server component. You can also Restart the web server, generate a CSR, edit administrative access restrictions, and download or upload the web server certificate, or if needed, upload a code certificate.
- Network - The Network service displays network properties for Cloudpath, and provides access to view or download the diagnostic logs.
- SSH - Use the SSH service to enable, disable or change the access port. SSH runs on ports 22 and 8022. You can set the port number using the command line or from the user interface. Even if you disable SSH access for both ports, SSH can continue to run.
- Support Tunnel - The Support Tunnel service allows you to open a support tunnel to help you in diagnosing issues with your application or configuration.
- Outbound Email - Use the onboard email provider or configure a local email server.
- Outbound SMS - Use the onboard SMS provider, enter a CDYNE account or route SMS message through a customer-owned account.
- Logs - Configure where syslog messages are sent. You can enable the syslog, select the protocol over which the syslog messages are sent, and enter a host and port number.
- External Reporting Server - Allows you to integrate Cloudpath enrollment data with a reporting server, such as the ELK stack (Elasticsearch, Logstash, and Kibana).
- Virtual Machine - Displays the system clock and system information about the virtual machine. You can also reboot or shut down the virtual machine from this page.
- Alexa - Allows you to bind or unbind Alexa, remove old binding data, or get Alexa log files.
- Auto VLAN Assignment - Allows you assign available VLAN IDs from a configured range of VLANs to users during their enrollment.
System Updates
System Updates - View and manage the Cloudpath build versions.
Data Cleanup
Data Cleanup - Manage database cleanup thresholds for enrollment records, abandoned certificates, vouchers, notifications, manage wizard versions, and other system events.
Firewall Requirements
Firewall Requirements - Displays inbound and outbound traffic from Cloudpath to assist with firewall configuration.