First Boot and administrator enrollment

Outcome: Finish the one-time LexiOS enrollment without exposing an unclaimed Panel on an untrusted network.

What appears after selecting a kernel

From the USB boot menu select 1 LexiKernel or 2 LexiOS on Linux 7.4. The Linux entry in the current image is 7.4-rc2.
The first boot expands the LEXIDATA data partition and filesystem to fill the stick (verified for both kernels).
Read the local status console. It reports the signing/Secure Boot state, the setup code and the Panel address. In the USB appliance the Panel listens on port 8090; the actual network address is displayed locally. Do not guess an address.
Use another browser on the trusted local network to open that displayed address. Before enrollment, the browser shows a standalone First-boot setup page with the Secure enrollment form, not the normal authenticated dashboard.

The local console keyboard

The status console reads the machine's own USB keyboard. Type a letter and press Enter:

Key	Under LexiKernel
N	Shows the address and that the Panel's port is open to the network.
U	Shows the Panel URL.
Y	Shows the version, Panel health and whether the data volume is mounted.
R / P	Reboot / power off. Each asks you to type `YES REBOOT` or `YES POWER OFF` (either letter case) and press Enter; anything else cancels. Services are stopped first.
Other letters	Under LexiKernel these actions are done from the Panel; the console says so. The Linux 7.4 entry performs them at the console.

Esc clears the line. USB keyboards and mice are on by default; the boot option lexios.usb_hid=0 turns them off.

Create the administrator

Review the hardware security summary above the form, including any critical or unknown status; stop to investigate unexplained failures.
In Temporary setup password or console code, enter the setup code shown on the machine's own screen: Lp1- and four groups of four characters, for example Lp1-89f9-7763-6dd5-9030. Type it in either letter case, with or without the Lp1- and the dashes. The code unlocks this form only and is discarded after enrollment. Five wrong codes from one address lock that address out, with the wait doubling after each further miss.
Enter Root password (12+ characters) and Confirm root password.
Review Administrator username (the installed default is supplied in the form), choose Administrator password (12+ characters; uppercase, lowercase, digit), and confirm it.
Optionally set LexiOS hostname (optional) according to your local naming policy.
Select Complete first-boot setup. Do not interrupt a credential or network write. After enrollment, sign in as the administrator and review Access, System, Network and Models in the Panel.

Who needs the setup code

Every browser on another machine needs the setup code: someone who can reach the Panel over the network but cannot see the machine's screen cannot create the administrator. Only a browser on the machine itself (a loopback connection) may enroll without it. Complete first boot on a network you trust all the same.

If you do not have the code, do not try values: read it from the machine's screen or ask whoever installed it.

After enrollment

Open Models, add an appropriately verified model and configure it under Instances.
Use Network and Access to review users, permissions, token scopes, firewall and network exposure. An admin-only terminal and password vault are documented in Files, Terminal and Passwords.
Inspect Diagnostics when the Console or Panel reports errors. The debug kit records failed UI requests but does not intentionally collect credentials.
When the kernel reports that storage usage or CPU usage cannot be measured under LexiKernel, do not interpret empty metrics as zero utilization; see Kernels.

Enrollment form reference

Control (label as shown)	What it does / consequence
Temporary setup password or console code	The setup code from the machine's screen (`Lp1-xxxx-xxxx-xxxx-xxxx`); proves you can see the machine. Required from any other machine.
Root password (12+ characters)	Sets the privileged system credential used for major system work.
Confirm root password	Must match the root password; prevents an accidental unrepeatable value.
Administrator username	Names the first Panel administrator.
Administrator password (12+ characters; uppercase, lowercase, digit)	Sets the initial administrator login credential.
Confirm administrator password	Must match the administrator password.
LexiOS hostname (optional)	Sets an optional local machine label; it is not a network address to enter in the browser.
Complete first-boot setup	Submits a privileged, one-time enrollment; do not allow an untrusted visitor to reach this page first.

If the page does not appear, the network fails or setup does not complete, follow Troubleshooting. See also Secure Boot and Security.