====== 9. System Administration ======

All functions in this chapter require the **Admin** role.

===== 9.1 System configuration =====

{{.:pasted:20260726-080338.png}}

//System → System// holds the global settings:

  * **Timezone:** all timestamps are stored in UTC and displayed in the timezone selected here (analysis views and reports alike).
  * **Language:** English or German; applies to the entire web interface and to generated reports.
  * **OEE Thresholds:** the lower bounds (%) of the color bands //Excellent / Good / Fair / Poor// used wherever OEE values are color-coded. Values must be descending.
  * **VPN:** optional remote-maintenance connection via Netbird: install the client and connect with a one-time **setup key** provided by Pinetek Networks or your Administrator. The card shows connection status, VPN IP, FQDN and peers.
  * **Data Retention:** automatically delete production data older than the configured number of days (''0'' = keep forever). The purge runs daily at 02:30 (local time); **Purge Now** runs it immediately.
  * **Danger Zone:** irreversible maintenance actions:
    * **Delete Database:** permanently deletes all production data and configuration and re-creates an empty schema. Requires typing ''DELETE'' to confirm. The default login is restored to admin/admin
    * **Seed Test Data:** fills the database with 60 days of realistic demo data (products, programs, runs, downtime and state events) for training/demos. Existing data is kept.

<WRAP important>
**Delete Database** cannot be undone. Make a backup first ([[cedar-insight:manual:09-system-administration#backup_restore|9.3]]).
</WRAP>

===== 9.2 User management =====

{{.:pasted:20260726-215555.png}}

//System → Users// manages accounts. Per user: **name**, **e-mail**, **password** and **access level** (//Basic//, //Operator//, //Supervisor//, //Admin//; see [[cedar-insight:manual:04-getting-started#signing_in_and_user_roles|chapter 4.2]]). Basic accounts have no password; all other levels require one. When editing, leave the password field blank to keep the current password. Users can be deactivated instead of deleted to preserve their history.


===== 9.3 Backup & Restore =====
//System → Backup// protects your production data. The status card shows the last backup and the next scheduled one.
Configure one or more targets and mark one as **active**:

==== USB Drive ====

{{.:pasted:20260726-220102.png}}

The USB Drive backup stores the data on a USB drive connected to the USB port of the Pinebox. 

The view lists detected drives and can **format** a new drive (!).

<WRAP important>
On format, all data on the USB stick on it is erased.
The USB Drive backup is the least secure backup. In case of issues with the Pinebox (overvoltage or similar), there is risk of data loss on the Pinebox and the backup media at the same time.
</WRAP>

==== Customer rsync ====

Backup to your own server via rsync/SSH
{{.:pasted:20260726-220705.png}}
You need to obtain the settings (host, user, remote path, port) for the remote rsync from your local Administrator, matching to your rsync setup.
**Test Connection** verifies the setup.

==== Pinetek Server ====
Managed cloud backup to Pinetek Networks infrastructure. 
{{.:pasted:20260726-221143.png}}
Requires the **Cloud Backup** license entitlement ([[cedar-insight:manual:09-system-administration#license_management|9.6]]). The backup target are the Pinetek servers, no further customer infrastructure is required.


==== Running backups ====

  * **Backup Now**: immediate incremental backup (only data since the last backup).
  * **Full Backup**: forces a complete dump regardless of what is already on the destination.
  * **Schedule**: enable daily automatic backup at a set time (HH:MM).
  * **History**: every backup with target, trigger, covered data range, size and status (//Running / Success / Failed//).

==== Restore ====

**Load Backups** lists the backups found on the active target; select one and press **Restore**.
<WRAP important>
Restoring overwrites the current data and cannot be undone.
</WRAP>
===== 9.4 E-mail / SMTP settings =====

//System → SMTP// configures the mail server  {{.:pasted:20260726-222552.png}} To send mails from the CedarInsight system (reports, alarms, ..), an external SMTP server is required that can be reached from the Pinebox that CedarInsight runs on. This SMTP is usually provided by your local Administrator or can be provided by Pinetek Networks (contact us for details).

In either case, the configuration data needs to be entered: **host**, **port**, **username/password**, **from address** and **TLS/STARTTLS**.

Use **Test Email** to verify the configuration.


===== 9.5 Software version & updates =====

{{.:pasted:20260726-223738.png?350}}

//System → Version// shows the **application version** and **database schema version**. This is relevant information if you need to contact support.

Software updates are handled by the separate update manager, which runs on port ''18090'' of the device; **Open Updater** takes you there.

<WRAP info>

CedarSense uses the same updater as the Pinebox. The file format are .pfw files.

</WRAP>




===== 9.6 License management =====

The Pinetek license shows the **machine ID**, registration state, time of the **last check** and the entitlement status:

^ Entitlement ^ Enables ^
| **Core** | Running CedarInsight at all ([[cedar-insight:manual:03-installation#license_activation|chapter 3.5]]) |
| **Cloud Backup** | Backup target //Pinetek Server// ([[cedar-insight:manual:09-system-administration#backup_restore|9.3]]) |
| **AI Chat** | The AI Assistant ([[cedar-insight:manual:06-analysis#ai_assistant|6.5]]) |

Actions: **Register** (with a license key), **Check License** (immediate re-validation, otherwise automatic every 24h, cached locally), and **Clear Local License** (removes the locally stored key and entitlements; the machine stays registered on the server).

<WRAP info >
If the CedarInsight system is operated in a non-online, isolated environment, the license does not expire.
</WRAP>


===== 9.7 Disk-space monitoring =====

The system monitors free disk space in the background and raises notifications ([[cedar-insight:manual:04-getting-started#notifications|chapter 4.5]]) when space runs low. If warnings appear, reduce the data-retention period ([[cedar-insight:manual:09-system-administration#system_configuration|9.1]]), purge old data, or contact support.