SupportConsoleDevelopersStart a trialContact

Chapter 1. Installing Red Hat Edge Manager on Red Hat Enterprise Linux

Install Red Hat Edge Manager on Red Hat Enterprise Linux to manage edge devices and applications at scale.

To get started using Red Hat Edge Manager on Red Hat Enterprise Linux, you must first:

  • Install the Red Hat Edge Manager RPM package
  • Configure your credentials
  • Install the Flight Control CLI
  • Optional: For Red Hat Ansible Automation Platform, OpenID Connect, or other authentication choices after installation, see the authentication options topic.

If you already run Red Hat Edge Manager on Red Hat Enterprise Linux and want to upgrade to a newer release, see the upgrade topic.

For more information, see Additional resources.

Prepare your Red Hat Enterprise Linux host for the installation of the Red Hat Edge Manager by enabling the necessary repositories, installing the flightctl-services package, and then starting and verifying the running services.

  • An active Red Hat Edge Manager subscription enabled for your Red Hat account

  • A Red Hat Enterprise Linux host with:

    • Red Hat Enterprise Linux 9.x or 10.x
    • Minimal installation
    • 4 cores and 16GB RAM (recommended)
    • Administrative access (root or sudo-capable user)
    • SSH access
    • Podman installed for managing containers

  • A DNS name that resolves to the Red Hat Edge Manager host’s IP address

    1. SSH into your Red Hat Enterprise Linux host.

    2. Authenticate and log in to the Red Hat Container Registry: 

      sudo podman login registry.redhat.io

    3. Install the necessary repositories and packages:

      • Ensure that the Red Hat Edge Manager repositories are enabled by running the following example command based on the version of Red Hat Enterprise Linux and architecture of your host:

        Note

        Use the repository identifier that matches your installed Red Hat Enterprise Linux major version and system architecture. The command below is only an example; substituting the wrong repository can cause enable or install steps to fail. 

        sudo subscription-manager repos --enable edge-manager-1.1-for-rhel-10-x86_64-rpms

      • Install the Red Hat Edge Manager service by running: 

        sudo dnf install -y flightctl-services

    4. Enable and start the services:

      Warning

      This command may take a few minutes to fully initialize all background services. 

      sudo systemctl enable --now flightctl.target

    5. Execute the following command to verify the status of the required services: 

      sudo systemctl list-units flightctl-*.service

Ensure that all listed services show a status of active.

Note

Some services are one-time initialization tasks (such as flightctl-db-migrate.service) and will correctly display a status of active (exited). Persistent background services will display as active (running).

If your services do not run correctly, use the following log command to troubleshoot further and remediate: 

sudo journalctl -u <impacted service> -b --no-pager

Once the operational status of the Flight Control services has been verified, the management server is ready to process requests.

You may now access the Web UI at https://<DNS_Name>; however, you must first configure valid authentication credentials to gain entry to the dashboard.

1.1.1. Configure authentication credentials
Copy link

By default, Red Hat Edge Manager on Red Hat Enterprise Linux uses the PAM Issuer to provide OIDC-compliant authentication backed by local system credentials.

  1. Create the flightctl-admin role group for global administrators: 

    sudo podman exec flightctl-pam-issuer groupadd flightctl-admin

  2. On your Red Hat Enterprise Linux host, prepare a Linux crypt (SHA-512) password hash for the next step’s useradd -p option. Any tool that produces a compatible hash is acceptable; the examples below are optional. As a best practice, keep plaintext out of podman exec commands and shell history—for example, run mkpasswd so the password is read interactively: 

    mkpasswd -m sha-512

    If mkpasswd is not installed, install the whois package (dnf install whois) or generate a SHA-512 crypt hash with openssl passwd -6.

  3. Create the user with a home directory, add the user to the group flightctl-admin, and apply the hash as the account password. Enclose the hash in single quotes so the shell does not expand $ characters in the hash. 

    sudo podman exec flightctl-pam-issuer useradd \
  -m \
  --groups flightctl-admin \
  -p '<PASSWORD_HASH>' \
  <USER>

1.1.2. Installing the Flight Control CLI
Copy link

You can install the Flight Control CLI via the RPM package or by downloading the binary from the UI. You can also obtain a pre-configured flightctl login command from the web console UI.

Installing the Flight Control CLI RPM package

To install the Flight Control CLI using the RPM, complete the following steps:

  1. Install the flightctl CLI with your package manager by running the following command: 

    sudo dnf install -y flightctl-cli

  2. Verify that the flightctl CLI is working correctly by running the following command: 

    flightctl version
    Note

    The output displays the Client Version. The Server Version is only available after you authenticate. Use the flightctl login command to log into the CLI for the first time to enable server version access.

  3. Run the following command to initiate the authentication process for the web UI.

    Note

    If you are using self-signed certificates, you will be prompted to allow an insecure connection. 

    flightctl login https://<DNS_Name>:3443 --username <user_name> --password <password>

The CLI is now successfully authenticated and configured to communicate with the Flight Control API. It establishes a secure link between your local environment and the management server, allowing you to issue subsequent commands to manage your fleets and devices.

Installing the Flight Control CLI binary from the UI

To install the Flight Control CLI binary from the UI, complete the following steps:

  1. Navigate to the UI at https://<DNS_Name>/ and log in using the credentials you created in the Configure authentication credentials section.
  2. Click the ❔ (question mark) icon in the upper part of the Red Hat Edge Manager UI.

  3. Select and click the downloadable archive file based on your Red Hat Enterprise Linux processor architecture.

    The <flightctl-os-arch>.tar.gz file is downloaded to your default download location.

  4. Extract the flightctl binary file from the downloaded archive. 

    $ tar -xvf <flightctl-os-arch>.tar.gz

  5. Copy the flightctl binary into a directory in your execution path as root, then set execute permission on the installed file. In the following example, the /usr/local/bin directory is on the path for users on the system: 

    $ sudo cp flightctl /usr/local/bin/
$ sudo chmod +x /usr/local/bin/flightctl

  6. Verify that the flightctl is working correctly by running the following command: 

    flightctl version
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Legal Notice

Theme

© 2026 Red HatBack to top