Skip to main content
The Management Tool is the web-based interface where you manage Syteca — users, Clients, alerts, secrets, dashboards, and audit logs. This page walks through opening it for the first time, what the interface looks like, and the two account self-service tasks you’ll do most often (changing your password and setting up two-factor authentication).
In SaaS, the process of opening and signing in differs slightly. See the SaaS Quick Start for the SaaS-specific flow.

​
Open and sign in

1

Open the URL

In your browser, go to:
For example, https://john-pc/MyMonitoringSystem — or, by default on the install host, https://hostname/Syteca. The URL folder is the one you specified during Management Tool installation.
If the self-signed certificate is not added to Trusted Root Certification Authorities, or the name in the address bar doesn’t match the certificate’s Issued To field, the browser will display a certificate error.
On Google Chrome 119.0.6045.160 and later, a certificate error may appear. See the troubleshooting note for the ERR_SSL_KEY_USAGE_INCOMPATIBLE error if this happens.
2

Sign in

Enter the credentials of an existing user (one shown on the Users page), then click Log In:
Enter the Login and Password defined when the user was created in the Management Tool.
On first open after install, sign in as admin (or whatever the built-in admin was renamed to) with the password defined during Application Server installation.
3

Complete 2FA (if enabled)

If two-factor authentication is enabled for your account, see Set up two-factor authentication below for the first-time setup, or enter the code from your authenticator app on subsequent sign-ins.
By default, only one session per credential is allowed. If another user signs in with the same credentials from a different IP, the first session is forcibly logged out. Configure concurrent-session behavior on the System Settings tab of the Configuration page.
The first time you open the Management Tool after installation, it may take a moment to launch — IIS hasn’t yet warmed up the application pool.

​
Set up two-factor authentication on first sign-in

If 2FA is enabled on your account (the Enable two-factor authentication on login checkbox is selected for you on the Users page), you must set it up on first sign-in.
1

Scan the QR code

A QR code appears after you enter your password. Open an authenticator app on your phone — Google Authenticator, Microsoft Authenticator, or any TOTP app — and scan the code.
2

Save the recovery code

The Management Tool also displays a one-time recovery code. Save this somewhere safe in case you lose access to your authenticator device.
If you lose both your authenticator device and your recovery code, an administrator will have to disable 2FA on your account to restore access.
3

Confirm

Click Confirm, then enter the current code from your authenticator app and click Continue.
After this first setup, sign-in is two steps: password, then current authenticator code.

​
Change your own password

Internal users — including the built-in administrator — can change their own passwords from within the Management Tool. Active Directory users manage their passwords in Active Directory, not here.
1

Open your account page

Click your user name in the top-right of any Management Tool page.
2

Enter passwords

On the Manage Account page:
  • Current password — enter your existing password.
  • New password — enter a new password.
  • Confirm password — re-enter the new password.
3

Save

Click Change Password. Use the new password on your next sign-in.

​
Lock user accounts on multiple failed sign-in attempts

To prevent brute-force attacks, the Application Server can automatically lock user accounts after a configurable number of failed sign-in attempts. Once locked, the user can’t sign in — even with correct credentials — until either the lockout duration passes or an administrator unlocks them. To enable this and tune the parameters, edit the EkranServer.Settings.config file on the Application Server computer and modify these keys:
In SaaS, the EkranServer.Settings.config file is not accessible. Contact your Syteca vendor or the Support team to modify these keys in your environment.
Once enabled, the lockout applies to all users. To unlock a specific user before the duration ends, an administrator with the User Management administrative permission can unlock them manually. See Lock and unlock users.
Single Sign-On (SSO) is independent of this lockout feature — SSO sign-ins are not affected by the lockout counter.

​
The Management Tool interface

Management Tool main interface showing the left navigation with Activity Monitoring, Alerts, Clients, Password Management and other sections plus the top bar

The Management Tool — left navigation provides access to every feature area, with the Configuration gear icon and user menu in the top bar.

The Main Menu runs down the left side of every page. Click the Syteca logo to collapse or expand the menu. The Configuration (cog) button at the top of the interface opens the Configuration page, with tabs for email settings, system settings, SIEM integration, ticketing system integration, LDAP targets, date & time format, database management, and serial key management. Most main pages also have action buttons in the top right — for example, Add Client Group, Install Clients, Manage Licenses, Edit the Uninstallation Key, Add User, Add Alert, Add Rule, Global Alert Settings, Export Alerts, and Import Alerts.

Install the Management Tool

Run the installer, configure the firewall, update, and uninstall.

Management Tool prerequisites

Pre-install setup: IIS, .NET, certificates, HTTPS binding.

Smart card access

Optional: enforce smart card authentication for the Management Tool.

Two-factor authentication

Configure 2FA across users and the system as a whole.