FAQ for SENTRA staff and operators

For step-by-step procedures see the Operations Runbooks.

Access#

I'm locked out of an ATS or NTS box. What now? If the box is managed by a GUARD, sign in with your GUARD account or open the box from the GUARD's node page. If the GUARD is unreachable, use the box's glass-break account. A local password can also be reset from the box's command line (see the product's admin manual). Wrong passwords lock an address out for a while — wait rather than retrying.

Why can't I see Users & roles on a GUARD I opened from VIEW? When you jump in from VIEW your role is capped at that GUARD's max jump-in role. Raise it on the GUARD and on VIEW, or sign in to the GUARD directly.

Who can change roles? Only the Super Admin on VIEW, and only master admins on GUARD and ATS (the built-in Admin on NTS). Built-in top roles can't be edited or deleted, and the last top-level admin can't be removed.

Licensing#

How do I license a new customer? Design the deployment in the Licensing Authority (Design & issue). VIEW and GUARD authorities then license their boxes automatically from the plan. Stand-alone boxes get a key bound to their Installation ID.

A box shows a licence as revoked. The Licensing Authority revoked it and the box learned this at check-in. Issue or renew a key in the Licensing Authority; the box picks it up at the next check-in (or Check in now).

Does a box need internet for its licence? No. Keys are checked offline. Online check-in only adds revocations and renewals.

Updates#

How do I ship a new version? The release builder tests every new version automatically. Open Releases in the Licensing Authority, review the candidate and its test log, and Approve & publish with a fresh 2FA code. Then update VIEW; GUARDs and nodes follow.

A candidate says "needs a version bump". The code on main changed after that version was published. A new release needs a new version number and changelog entry.

Can I stop unsigned code from ever being installed? Yes. Set GUARDs to require signed releases (OTG_REQUIRE_SIGNED=1) and nodes likewise (SENTRA_REQUIRE_SIGNED=1), once everything runs a version that supports signed releases.

Operations#

VIEW is down. Can we still work? Yes. Work on each GUARD directly. Changes reach VIEW when it is back. Tickets wait for VIEW.

Where are prices set? On a GUARD on its own: Billing → Plans & pricing. Under VIEW: VIEW's Plans & pricing, pushed to every GUARD.

How do I reset a forgotten console password? ATS: sudo sentra-shield passwd <user> and sudo sentra-shield 2fa-reset <user> on the box. NTS: sudo sentra-nts passwd --user <user> and --reset-2fa. Licensing Authority: sudo sentra-licensing reset-2fa <user> / unlock <user>.