RC RaceControl
Secure bootstrap

Venue deployment lane

Bring a venue online from anywhere.

One short onsite bootstrap. RaceControl handles device identity, licensing, signed installation, fleet health, updates, and recovery from the protected control plane.

Run from elevated PowerShell after download Preparing pinned publisher command...

Onsite runbook

Three controlled moves

  1. 01

    Download on the venue server

    Use the signed bootstrap package on the designated Windows venue server. Windows verifies the Racing Point publisher certificate before execution.

  2. 02

    Enter the one-time activation

    The installer prompts locally. The code is consumed once, never becomes a runtime credential, and is replaced by a non-exportable device key and mTLS certificate.

  3. 03

    Let the venue agent take over

    The outbound-only agent enrolls pods, reports health, receives signed rollout intents, and automatically returns to the last known-good release when a gate fails.

Trust boundary

The portal holds no provisioning secrets.

This site is static. Keycloak authenticates administrators, while license decisions, certificate issuance, signing keys, activation digests, and audit evidence remain on RaceControl protected backend infrastructure.

Break-glass lane

The USB package remains supported only for offline disaster recovery. It is not the normal Chennai, Delhi, Hyderabad, or future venue installation path.