Skip to main content
SaltStack Support

Enterprise Installation: Initial Configuration

Create credentials for Salt Masters

Each Salt Master is configured to use the superuser account to connect to Enterprise API to simplify initial installation. For increased security, you should generate an Enterprise API account for each Salt Master.

  1. Open Enterprise Console and log in using the superuser account.

  2. Go to Menu menu-icon.png > System Administration > Local Users.

  3. Create a user account for each Salt Master and add each Salt Master account to the Salt Master system role.

  4. On each Salt Master, edit the /etc/salt/master.d/raas.conf file and update the sseapi_username and sseapi_password with the account credentials you created.

  5. Restart the Salt Master service.

    $ sudo systemctl restart salt-master
    

Change the root password

You can change the default password for the root user.

  1. Open Enterprise Console and log in using the superuser account.

  2. Go to Menu menu-icon.png > System Administration > Local Users.

  3. Select the root account and enter a new password, then click Save.

Enable more accurate presence detection

SaltStack Enterprise provides a job to install a Salt Beacon that sends periodic heartbeats from each Salt Minion. A good practice is to install this job on all minions to enable more accurate presence.

  1. Open Enterprise Console and log in using the superuser account.

  2. Go to All Minions and select the All Minions target.

  3. Click Run Job and select Enable Presence.

Back up critical data

If you are not using a complete system backup solution that can restore your entire SaltStack Enterprise server, at a minimum you should back up the following files:

  • /etc/raas/pki - This directory contains a hidden file named raas.key that is used to encrypt the pillar data while at rest in the database. If you need to restore your SaltStack Enterprise server by re-installing, it is critical that you restore the original raas.key used when the database was created. If this file is lost, you lose all pillar data values in the Enterprise API file system.

  • /etc/raas/raas - This file contains SaltStack Enterprise configuration data.

  • Enterprise API Database - Configure regular PostgreSQL database backups for the Enterprise API database.

Congratulations!

You are now ready to manage your infrastructure using SaltStack Enterprise. Click the help icon in Enterprise Console for additional guidance.

  • Was this article helpful?