First sign-in

1. Trust the appliance’s certificate

The appliance creates its own certificate authority (CA) during installation and uses it for the console, the agents and the dashboards. Browsers don’t know this CA yet, so the first visit shows a certificate warning.

To remove the warning for good, install the appliance CA on the computers your team uses:

1. Download it from https://<appliance>:8080/api/agent/ca.crt (or copy /opt/garrison/certs/vclocal-ca.crt from the appliance).
2. Import it as a trusted root:
   • Windows: double-click the file → Install Certificate → Local Machine → Trusted Root Certification Authorities.
   • macOS: open it in Keychain Access, add it to System, and set Always Trust.
   • Linux: copy it to /usr/local/share/ca-certificates/garrison-ca.crt and run sudo update-ca-certificates. Firefox has its own store: Settings → Certificates → Import.

The CA can only vouch for the appliance’s own names and addresses, so trusting it does not let it impersonate other sites.

2. Sign in

Open https://<appliance>/ and sign in with the admin address you gave the installer and the password from /opt/garrison/.env (ADMIN_PASSWORD).

Change the password straight away: Settings → Account → Change password.

3. First settings

Where	What to set
Settings → Users	Create accounts for your team. Public sign-up is off; only admins create users.
Settings → Model	The AI model your chats use. The appliance’s own model is the default.
Settings → Preferences	Approval mode: Changes only (default: read-only checks run on their own, changes wait for approval) or All commands.
Settings → Notifications	Email (SMTP) for case and approval notifications.
Settings → Escalation	Who is told when a case is escalated, and how fast.

4. Look around

The appliance already shows itself in Systems, its logs and metrics in Observe, and its models in AI Gateway. Start with the console tour, then enrol your systems.