Administrator enrollment
One-time secure establishment of the first administrator
Administrator already enrolled
The first administrator has been established and the bootstrap is permanently sealed. Sign in from the main login page.
This flow is protected by an owner-controlled bootstrap secret provisioned in the deployment environment. It can be completed only once; after activation it is permanently sealed and cannot be reopened. Every step is recorded in the immutable audit ledger. No password or MFA secret is stored in plaintext, logged, or known to any AI system.