---
title: "Set up your Outpost"
description: "Work through the five step welcome wizard that opens the first time an owner signs in to a new Outpost console."
url: "https://support.outpostplatform.com/depot/first-run-setup/"
product: "depot"
type: "how-to"
status: "draft"
ai_summary: "The first-run setup wizard in the Outpost console, Set up your Outpost. Five steps: Password (required), Compliance, Network discovery, Team, and Agents. Only the password is required. The console stays closed until an owner finishes the wizard, and the wizard cannot be reopened afterwards; each setting is changed later on its own page."
availability:
  plans: ["home-lab", "essentials", "enterprise", "msp"]
  permission: "client:manage"
  preview: false
source: "https://gitlab.com/outpostplatform/docs/-/edit/main/src/content/docs/depot/first-run-setup.md"
license: "CC BY 4.0"
---

# Set up your Outpost

The first time you open a new Outpost console, a wizard called **Set up your
Outpost** walks you through five steps: your password, the compliance
frameworks you need to meet, network discovery, your team, and the agent
installer. When you finish, the rest of the console opens. Only the password is
required, and you can skip every other step and come back to it later.

## Before you begin

- You have created your Outpost account in the Outpost portal. The portal
  sends you to your new console with a single-use link that signs you in. See
  [Account and billing](/account/).
- You are the owner. The wizard opens for anyone who holds `client:manage`,
  which among the built-in roles only the owner holds. Other people who sign
  in before setup is finished go straight to the console.
- The single-use link works once. If you close the tab before you set a
  password, use **Email me a sign-in code instead** on the sign-in page to get
  back in.

:::note
Until setup is finished, every console page sends the owner back to the
wizard. After you finish, the wizard cannot be opened again. Each step's
setting is changed later on the page that owns it.
:::

## Step 1: Password

1. On **Choose your password**, enter a password in **Password**. It must be at
   least 12 characters. Outpost checks it against known breached passwords.
2. Enter it again in **Confirm password**.
3. Select **Set password**.

This step cannot be skipped. If you reload the page after setting a password,
the wizard resumes at step 2.

## Step 2: Compliance

On **Which frameworks do you need to meet?**, select every framework that
applies to your organization. Each one assigns its built-in baseline profile to
your whole organization. That profile sets the defaults Outpost applies, and
the settings your own profiles are not allowed to weaken.

| Framework | Status in the wizard |
| --- | --- |
| **SOC 2** | enforced |
| **HIPAA Security Rule** | enforced |
| **CJIS Security Policy** | enforced |
| **PCI DSS 4.0** | enforced |
| **NIST SP 800-171** | enforced |
| **NIST SP 800-53 Rev 5** | enforced |
| **CMMC Level 2** | enforced |
| **ISO/IEC 27001** | enforced |
| **CIS Benchmarks** | recorded only |

**CIS Benchmarks** ships no content, for licensing reasons, so selecting it
puts nothing in force.

1. Select the frameworks you need.
2. Select **Continue**, or **Skip for now** to choose none.

You can change your frameworks later under **Profiles**. See
[Profiles](/automation/profiles/) and [Compliance](/compliance/).

## Step 3: Network discovery

On **Find the devices on your networks**, choose whether your agents list the
other devices on the networks they sit on: computers without an agent,
printers, phones, and network gear. Outpost then suggests the computers that
could take an agent.

Agents read what their own network tables already hold, and one agent per
network runs a slow, rate-limited scan. Device details stay in your Outpost.

1. Select **Allow** to turn discovery on, or **Skip for now** to leave it off.

You can turn discovery off later under **Profiles**.

## Step 4: Team

On **Invite your team**, invite the people who need to sign in to the console.
There are no per-user fees.

1. For each person, enter their email address and, optionally, their name.
2. Choose a role: **Field Technician**, **Support Rep**, **Support Manager**,
   or **Accounting**. See [Roles and permissions](/depot/roles-and-permissions/).
3. Select **Add another** for more rows.
4. Select **Send invitations**, or **Skip for now**.

Each row then shows **emailed** when the invitation was sent by email, **link
only** with the invitation link when it could not be emailed, or **failed**.
Pass a **link only** invitation on yourself.

:::note
Home Lab allows 1 console user and Essentials allows 3. Pending invitations
count toward the limit. See
[Plans and limits](/account/plans-and-limits/).
:::

## Step 5: Agents

On **Install the agent**, download an installer to enroll your first endpoint.

1. Select the installer for your platform: **Windows installer**, **Linux
   (x86-64)**, **Linux (arm64)**, **FreeBSD (x86-64)**, **FreeBSD (arm64)**,
   **OpenBSD (x86-64)**, or **OpenBSD (arm64)**. macOS installers appear here
   when your Outpost offers them.
2. Keep the installer and the configuration file it comes with together. The
   configuration file points the agent at your Outpost.
3. Select **Finish setup**.

You can download installers at any time under **Endpoints**. See
[Install and enroll the agent](/agent/install-and-enrollment/).

## Verify

After **Finish setup**, the console opens with the full navigation rail, and
opening any page no longer returns you to the wizard. Open **Settings** > **Team** to check that the people you invited are
listed with the status **invited**.

## Next steps

- [Set your support contact](/depot/support-contact/) before you send
  installers to end users.
- [Configure outgoing email](/depot/email/) so invitations and alerts are
  delivered.
- [Manage your console account](/depot/account-security/) with two-factor
  authentication.