X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/83898701e9c75661a240cadcf31f80cbccbb698e..7bebcf045b39a4bdecb345c9592c0515795c75aa:/doc/install/install-api-server.html.textile.liquid?ds=sidebyside diff --git a/doc/install/install-api-server.html.textile.liquid b/doc/install/install-api-server.html.textile.liquid index 2893111e35..7d0353c9e7 100644 --- a/doc/install/install-api-server.html.textile.liquid +++ b/doc/install/install-api-server.html.textile.liquid @@ -49,20 +49,19 @@ h3. Tokens
SystemRootToken: "$system_root_token"
ManagementToken: "$management_token"
Collections:
- BlobSigningKey: "blob_signing_key"
+ BlobSigningKey: "$blob_signing_key"
-@SystemRootToken@ is used by Arvados system services to authenticate as the system (root) user when communicating with the API server.
+These secret tokens are used to authenticate messages between Arvados components.
+* @SystemRootToken@ is used by Arvados system services to authenticate as the system (root) user when communicating with the API server.
+* @ManagementToken@ is used to authenticate access to system metrics.
+* @Collections.BlobSigningKey@ is used to control access to Keep blocks.
-@ManagementToken@ is used to authenticate access to system metrics.
-
-@Collections.BlobSigningKey@ is used to control access to Keep blocks.
-
-You can generate a random token for each of these items at the command line like this:
+Each token should be a string of at least 50 alphanumeric characters. You can generate a suitable token with the following command:
~$ tr -dc 0-9a-zA-Z </dev/urandom | head -c50; echo
+~$ tr -dc 0-9a-zA-Z </dev/urandom | head -c50 ; echo