Skip to main content

Run the primer as a binary

This walk-through will describe how to run the Corsha Primer using as a native binary to prime a Corsha Authenticator.

Obtaining an Authenticator Secret using the Windows or Linux binary of Primer​

In environments where Kubernetes or Docker is unavailable, we provide the Primer as a native binary. To get the Primer binary,contact your Corsha TPOC.

Mutual TLS​

The Primer uses mutual TLS when it obtains an Authenticator Secret from the Corsha Control Plane. The client certificates for mutual TLS are embedded in the Primer Secret that is passed to the Primer as an environment variable and should not be stored in plaintext.

Running on Linux​

In order to run the binary on Linux, you will simply need to set some environment variables and run the Primer binary. See the configuration documentation to configure the necessary environment variables and arguments.

export PRIMER_SERVICE_HOST=auth-server-primer.example.com
export PRIMER_SERVICE_PORT=443
export PRIMER_SECRET=<FILL IN the Primer Secret created in the Console>
./mstream-primer <Machine ID> <Build ID> <Job ID> > authenticator-secret.txt
Running on Windows​

On Windows we can deploy the Primer using the below Batch script which will also need to set the environment variables and arguments described in the configuration page

set PRIMER_SERVICE_HOST=auth-server-primer.example.com
set PRIMER_SERVICE_PORT=443
set PRIMER_SECRET=<FILL IN the Primer Secret created in the Console>
.\mstream-primer.exe <Machine ID> <Build ID> <Job ID> > authenticator-secret.txt
timeout 10
Output​

The output of this command will contain the Authenticator Secret which can be used to deploy a Corsha Authenticator

CA Certs​

In some cases, the device running the primer will need CA certs to connect to the Corsha Auth Server. In this case, your Corsha TPOC will provide a bundle of PEM-encoded CA certs used to extend trust.

When running the primer, add one additional flag called --ca-cert to the ./mstream-primer.exe command.

./mstream-primer <Machine ID> <Build ID> <Job ID> --ca-cert <path to cert bundle> > authenticator-secret.txt