Internal — operators only
Operator console guide
Finance, operations, support, and super admins.
Sign in
Console gate: //gate/ittisal-lic-x7k9m2— not linked from the public site. Use work email + password; MFA when enforced.
Roles
| Role | Capabilities |
|---|---|
| SUPER_ADMIN | All: operators, SMTP, key rotation, incident response |
| OPERATIONS | Issue, lifecycle, fulfill orders |
| SUPPORT | Customers, orders, re-issue, renew, block |
| FINANCE | Customers, reports — no issuance |
| READ_ONLY | Dashboard + audit |
First-login checklist
- Settings → change password from seed default.
- Settings → MFA wizard (QR scan or manual TOTP secret).
- Settings → register FIDO security key (super admins).
- Super admin: Settings → SMTP + team notification emails.
Daily workflows
- Orders queue — verify email → fulfill or reject → delivery email sent.
- Issue license — customer, tenant UUID, metrics, sign.
- Lifecycle — re-issue (hardware/key), renew (extend), block (non-payment), revoke (abuse).
- Key rotation — deploy new PEM → Admin → Re-issue all (FIDO or break-glass).
Full runbooks (repository)
Detailed procedures: docs/license/OPERATOR_GUIDE.md, OPERATIONS.md, RECOVERY.md, TROUBLESHOOTING.md