Linux control panel security and tools

On Linux, the control panel is reached from a web browser, so anyone on the school network can open its sign-in page. Protect it.

The panel's sign-in

The panel has its own sign-in. It is not your Academium Account.

The first time, sign in with admin / admin. Until you change it, the panel warns that anyone on this network who knows it can manage the server.

To change it, open the Settings tab:

  1. Enter a new username, if you want one.
  2. Enter the new password twice.
  3. Enter your current password, and save.

You are signed out and asked to sign in again with the new details. Every other open session is signed out too.

Two-factor sign-in

For extra protection, add a one-time code from an authenticator app, such as Google Authenticator, Authy or 1Password.

  1. In Settings, choose Enable two-factor and confirm your panel password.
  2. Add the account to your authenticator app (scan the code, or type the setup key), then enter the six-digit code it shows.
  3. Save the recovery codes somewhere safe. Each works once if you lose your authenticator. They are shown only now.

The panel then asks for a code each time you sign in. Lost your device? Enter a recovery code, or, once the server is linked to your school, your Academium Account password.

To turn two-factor off, confirm your panel password and a current code, or a recovery code.

Support tools

The Settings tab also has tools that Academium support may ask you to use. Do not use them otherwise.

Tool What it is
Debug mode Shows detailed error pages, including sensitive information. It switches itself off after 30 minutes.
Database administration Direct access to the database in a web browser. Off by default; turn it off again when finished.
Reset database password Fixes a database connection error. Safe to run: it cannot make a working server worse.

Terminal

The Terminal tab opens a command line on the server, for whoever looks after the computer. It needs a user account on the server computer, not the panel sign-in, and has whatever access that account has.

Power

The power button restarts or shuts down the whole server computer. A shut-down server stays off until someone switches it on in person.

For whoever looks after the computer

The server also has commands for the computer's command line:

Command Does
sudo academium-sms setup First-time configuration
academium-sms status Shows whether the services are running
academium-sms doctor Checks the computer for everything the server needs, and reports problems
academium-sms backup Takes a backup

The control panel does all of this too, and is the recommended way.