Requirements
- Linux (x86_64 or arm64)
- Outbound HTTPS/gRPC to AO Cloud
- Root (or equivalent) to observe system services
Install
What enrollment does
- The Toolkit generates a keypair on the host — private keys never leave the machine.
- It exchanges your one-time enrollment token for a short-lived mTLS client certificate.
- Certificates renew automatically in the background for the life of the install.