Configuring the Edge Platform Software from the Service CLI

After self-provisioning a Roving Edge device, configure the OCI Edge Platform software using the Service CLI.

This entire procedure is best performed as one workflow. It's broken down into sections to improve navigation and clarity.

Create an Administration Account

Connect to the Roving Edge device to create a primary administration account.

From your controlling host such as a laptop, connected to the same subnet as the Roving Edge device, log in to the shell using SSH. Provide an empty username string. When prompted for a password, press Return.
```
$ ssh -l '' -p 30006 <device_ip>
```

Confirm initial user sign-in, where System Config State = Config User.

RED2-ADMIN> show pcaSystem
Data:
  Id = 18090040-a7b0-4475-b845-7ae827649a6d
  Type = PcaSystem
  System Config State = Config User

Create the primary administrative account for your device, which is used for initial configuration and persists after the first boot process.
```
RED2-ADMIN> createAdminAccount name=admin password=******************** confirmpassword=********************
Status: Success
JobId: 3057db5d-d7da-4f3d-83bb-47cecd06f9f8
```
Note

Passwords must contain a minimum of 12 characters with at least one of each: uppercase character, lowercase character, digit, and any punctuation character – except for double quote ('"') characters, which aren't allowed.
Enter the exit command or close the terminal window.

Unlock the Device

Unlock the device. This step must be performed from the Service CLI.

Open a terminal window and log in to the management node using the primary administrative account.
```
$ ssh admin@pcamn01 -p 30006
Password authentication
Password:
RED2-ADMIN>
```
Enter the systemStateUnlock command.
```
RED2-ADMIN> systemStateUnlock
```

Verify the system is unlocked.

RED2-ADMIN> show pcaSystem
Data:
  Id = 5709f72b-c439-4c3a-8959-758df94eff25
  Type = PcaSystem
  System Config State = Config System Params
  System State Locked = false

Enter the exit command or close the terminal window.

Setting the System Operating Mode

Set the parameters that determine the operating mode. The Roving Edge device operates disconnected from OCI, but is always configured in connected state.

Open a terminal window and log in to the management node using the primary administrative account.
```
$ ssh admin@pcamn01 -p 30006
Password authentication
Password:
RED2-ADMIN>
```

Confirm the system is ready for configuration, where System Config State = Config System Params.

RED2-ADMIN> show pcaSystem
Data:
  Id = 5709f72b-c439-4c3a-8959-758df94eff25
  Type = PcaSystem
  Product Type = RED2
  System Mode = Standalone
  Connected State = false
  System Config State = Config System Params
[...]

Configure the operating mode and related system parameters.

A Roving Edge device operates in disconnected mode, but is always configured in connected state. Run the linkToOCI command using this syntax:

RED2-ADMIN> linkToOci
ociTenancyId=<tenancy_ocid> ociInfrastructureId=<infra_ocid>
region=<region-name> regionKey=<region-key> realmDomainComponent=<realm-domain>

Example:

RED2-ADMIN> linkToOci \
ociTenancyId=ocid1.tenancy.oc1...<unique_id> 
ociInfrastructureId=ocid1.cccinfrastructure.oc1...<unique_id> \ 
region=us-ashburn-1 regionKey=IAD realmDomainComponent=myrealm.org

Confirm the system is linked.

RED2-ADMIN> show pcaSystem
Data:
  Id = 5709f72b-c439-4c3a-8959-758df94eff25
  Type = PcaSystem
  Product Type = RED2
  System Mode = Linked
  Connected State = true
  System Config State = Config System Params
[...]

Configure the system name and domain name, then verify the settings.

RED2-ADMIN> setDay0SystemParameters systemName=red01 domainName=us.example.com
Status: Success
JobId: 2e5c08cc-3fe3-4631-ab86-8c60e30468ad

PCA-ADMIN> show pcaSystem
Data:
  Id = 5709f72b-c439-4c3a-8959-758df94eff25
[...]
  System Name = red01
  Domain Name = us.example.com
  Availability Domain = AD-1

Keep the CLI connection open. Proceed to the next section of this initial setup procedure.

Configuring the System Network

When the operating mode and base system parameters are locked in, you must configure the system network. Use the data you prepared in advance. See Network Resource Planning.

Caution

If traffic must pass through a proxy server in the network environment where the Roving Edge device is installed, configure a system-wide proxy AFTER system network configuration (setSimpleNetworkConfig command). See Configuring Appliance Proxy Settings.

Return to the CLI connection you left open at the end of the preceding section.

Confirm the system is ready for network configuration, where System Config State = Config Network Params. Do not proceed while the state reads Wait for Networking Service.

RED2-ADMIN> show pcaSystem
Data:
  Id = 5709f72b-c439-4c3a-8959-758df94eff25
  Type = PcaSystem
  Product Type = RED2
  System Mode = Linked
  Connected State = true
  System Config State = Config Network Params
[...]

Set the network parameters. Run the device network configuration command using this syntax:

RED2-ADMIN> setSimpleNetworkConfig activeConfiguration=True
uplinkGateway=<subnet-gateway-ip> uplinkIntfIpCidr=<uplink-interface-cidr>
mgmtVip=<management-node-vip> mgmt01Hostname=<management-node-hostname>
ntpIps=<ntp-server-ips>
dnsIp1=<dns-server-ip> dnsIp2=<dns-server-ip>
publicIps=<public-ip-range>

Example:

RED2-ADMIN> setSimpleNetworkConfig activeConfiguration=True \
uplinkGateway=10.25.125.1 uplinkIntfIpCidr=10.25.125.161/24 \
mgmtVip=10.25.125.101 mgmt01Hostname=red01 \
ntpIps=10.25.68.1,10.25.0.4,10.211.17.1 \
dnsIp1=206.223.27.1 dnsIp2=206.223.27.2 \
publicIps=10.25.125.129/27,10.25.125.162/32,10.25.125.163/32

Status: Running
JobId: aafb988c-9bad-4b28-a7ba-7c6a77f55dde
Data: Created a job for setSimpleNetworkConfig

Confirm that network configuration has completed successfully, where System Config State = Complete.

RED2-ADMIN> show pcaSystem
Data:
  Id = 5709f72b-c439-4c3a-8959-758df94eff25
  Type = PcaSystem
  Product Type = RED2
  System Mode = Linked
  Connected State = true
  System Config State = Complete
[...]

Keep the CLI connection open. Proceed to the next section of this initial setup procedure.

Creating a Customer Administrator Account

Note

As part of initial setup, you may create a customer administrator user and a Grafana Editor user. This must be done during setup because permissions to create these accounts are time-limited. You have two hours after the Edge Platform network configuration is completed to add them. After that, you must submit a service request to create the accounts.

Create a customer administrator account to manage disaster recovery and limited administration tasks.

List the available authorization groups.

RED2-ADMIN> list AuthorizationGroup
Command: list AuthorizationGroup
Status: Success
Time: 2026-02-25 16:58:29,867 UTC
Data:
  id                                     name
  --                                     ----
  127b4862-a025-4f89-96b6-921342ad00e9   Initial
  152caf31-1084-4981-8f6d-2e709b178675   EdgeAdminGroup
  431117ca-8714-438c-a69d-8c1ac59a0d3d   RestFaultHandlingGroup
  51a19d5e-114b-4583-a7a0-952d533590ae   OracleServiceAdmin
  6d7ce5e7-a5c1-4bf9-9d53-f9061bae068f   PeerDrAdmin
  76951fa3-3990-4ba4-9955-94cc2e46c56e   FilterLogsGroup
  8000e4bb-dca2-4739-be7f-27ecd7f88376   OCIApp
  a215bef7-5e27-48c7-aff8-a90ce77a0158   C3IsolatedGroup
  cace2c49-0078-4e36-a1ca-4155d4e844be   SuperAdmin

Create a new user in the EdgeAdminGroup.

RED2-ADMIN> createUserInGroup name=red2_admin password=password
confirmPassword=password authGroup=152caf31-1084-4981-8f6d-2e709b178675

Creating a Grafana User

Grafana works with its own user accounts. Before the initial password rotation for the EdgeAdmin user account, configure a monitoring user account on Grafana. For more information, see Managing Grafana Users.

Log in to Grafana with the EdgeAdmin user account.
In the vertical menu bar on the left side of the Grafana home page, click the Server Admin (shield) icon.
On the Server Admin drop down menu, click Users.
Click the New User button.
Enter the requested information, and click the Create User button.

Provisioning a Compute Node

A Roving Edge device contains a (virtual) compute node: a host to run the users' virtual machines. Use the platform software to provision the compute node so it becomes available for compute instance deployment.

Verify that the compute node is ready to be provisioned. Record the id because you need to provide it with the provisioning command next.

RED2-ADMIN> list ComputeNode
Status: Success
Data:
  id                                     Name       Provisioning State   Provisioning Type
  --                                     ----       ------------------   -----------------
  5a16f841-f9f1-40ba-ab9d-fe25337dfd9a   pcacn001   Ready to Provision   Unspecified

Start compute node provisioning

RED2-ADMIN> provision id=5a16f841-f9f1-40ba-ab9d-fe25337dfd9a
Status: Running
JobId: 7436689e-eca8-4e1b-baae-e39af2a98bd8
Data: provision Started.

Confirm that provisioning completes successfully.

RED2-ADMIN> list ComputeNode
Status: Success
Data:
  id                                     Name       Provisioning State   Provisioning Type
  --                                     ----       ------------------   -----------------
  5a16f841-f9f1-40ba-ab9d-fe25337dfd9a   pcacn001   Provisioned          KVM

What's Next?

The platform configuration is complete. To enable compute instance deployment, you need to create a tenancy and load the platform images. See Managing the Roving Edge Tenancy.

Before accessing the tenancy, users should read and understand these topics:

Oracle Cloud Infrastructure Documentation