{"id":17408,"date":"2023-06-23T23:45:02","date_gmt":"2023-06-23T20:45:02","guid":{"rendered":"https:\/\/kifarunix.com\/?p=17408"},"modified":"2024-03-10T09:45:52","modified_gmt":"2024-03-10T06:45:52","slug":"install-passbolt-on-debian-12","status":"publish","type":"post","link":"https:\/\/kifarunix.com\/install-passbolt-on-debian-12\/","title":{"rendered":"Install Passbolt on Debian 12"},"content":{"rendered":"\n<p>In this tutorial, you will learn how to install Passbolt on Debian 12. <a aria-label=\"undefined (opens in a new tab)\" href=\"https:\/\/www.passbolt.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Passbolt<\/a> is is a free, open source, self-hosted, extensible, OpenPGP based password manager that enables teams to securely store their personal as well as share their common credentials. It is available both a subscription based and community edition. This tutorial focuses on the setup of community edition.<\/p>\n\n\n\n<div class=\"wp-block-rank-math-toc-block\" id=\"rank-math-toc\"><h2>Table of Contents<\/h2><nav><ul><li><a href=\"#installing-passbolt-on-debian-12\">Installing Passbolt on Debian 12<\/a><ul><li><a href=\"#prerequisites\">Prerequisites<\/a><\/li><li><a href=\"#install-lamp-lemp-stack-on-debian-12\">Install LAMP\/LEMP Stack on Debian 12<\/a><ul><li><a href=\"#install-nginx-http-server\">Install Nginx HTTP Server<\/a><\/li><li><a href=\"#install-php-on-debian-12\">Install PHP on Debian 12<\/a><\/li><li><a href=\"#install-maria-db-my-sql-on-debian-12\">Install MariaDB\/MySQL on Debian 12<\/a><\/li><\/ul><\/li><li><a href=\"#installing-passbolt-on-debian-12-1\">Installing Passbolt on Debian 12<\/a><ul><li><a href=\"#install-passbolt-offical-repos-on-debian-12\">Install Passbolt Offical Repos on Debian 12<\/a><\/li><li><a href=\"#install-passbolt\">Install Passbolt<\/a><\/li><li><a href=\"#create-database-and-database-user-for-passbolt\">Create Database and Database user for Passbolt<\/a><\/li><li><a href=\"#choose-passbolt-web-server\">Choose Passbolt Web Server<\/a><\/li><li><a href=\"#passbolt-nginx-configuration\">Passbolt Nginx Configuration<\/a><\/li><li><a href=\"#configure-nginx-with-tls-generate-tls-certificates\">Configure Nginx with TLS: Generate TLS certificates<\/a><\/li><\/ul><\/li><li><a href=\"#finalize-passbolt-configuration-on-browser\">Finalize Passbolt Configuration on Browser<\/a><ul><li><a href=\"#install-passbolt-browser-extension\">Install Passbolt Browser Extension<\/a><\/li><li><a href=\"#setup-passbolt-passphrase\">Setup Passbolt Passphrase<\/a><\/li><li><a href=\"#download-and-save-passbolt-passphrase-private-key\">Download and Save Passbolt Passphrase private Key<\/a><\/li><li><a href=\"#choose-a-color-to-identify-your-secret-token-with\">Choose a Color to Identify your Secret Token with<\/a><\/li><li><a href=\"#passbolt-dashboard\">Passbolt Dashboard<\/a><\/li><\/ul><\/li><li><a href=\"#reference\">Reference<\/a><\/li><li><a href=\"#related-tutorials\">Related Tutorials<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"installing-passbolt-on-debian-12\">Installing Passbolt on Debian 12<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"prerequisites\">Prerequisites<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Install a fresh Vanilla Debian 12 server.<\/li>\n\n\n\n<li>Allocate the server at least 2 GB RAM and 2 vCPUs<\/li>\n\n\n\n<li>A resolvable hostname or IP address of your server.<\/li>\n\n\n\n<li>Install LEMP\/LAMP stack on Debian 12<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"install-lamp-lemp-stack-on-debian-12\">Install LAMP\/LEMP Stack on Debian 12<\/h3>\n\n\n\n<p>Assuming that the first three prerequisites mentioned above have been met, proceed to install LEMP\/LAMP stack on Debian 12 server.<\/p>\n\n\n\n<p>Note that Passbolt is written in PHP and hence, it requires either a LEMP or a LAMP stack to run.<\/p>\n\n\n\n<p><strong>In this tutorial, we are using LEMP stack to run Passbolt.<\/strong><\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"install-nginx-http-server\">Install Nginx HTTP Server<\/h4>\n\n\n\n<p>Nginx will be installed and configured by the Passbolt package installer.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"install-php-on-debian-12\">Install PHP on Debian 12<\/h4>\n\n\n\n<p>Passbolt supports PHP 8, which is the default PHP version available on the default Debian repos.<\/p>\n\n\n\n<p>Similarly, the Passbolt installer will install PHP and all required modules.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"install-maria-db-my-sql-on-debian-12\">Install MariaDB\/MySQL on Debian 12<\/h4>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/install-mariadb-10-on-debian-12\/\" target=\"_blank\" rel=\"noreferrer noopener\">Install MariaDB 10 on Debian 12<\/a><\/p>\n\n\n\n<p>Ensure the database is running;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl status mariadb<\/code><\/pre>\n\n\n\n<pre class=\"scroll-box\"><code>\n\u25cf mariadb.service - MariaDB 10.11.3 database server\n     Loaded: loaded (\/lib\/systemd\/system\/mariadb.service; enabled; preset: enabled)\n     Active: active (running) since Fri 2023-06-23 19:54:58 EAT; 41s ago\n       Docs: man:mariadbd(8)\n             https:\/\/mariadb.com\/kb\/en\/library\/systemd\/\n   Main PID: 5695 (mariadbd)\n     Status: \"Taking your SQL requests now...\"\n      Tasks: 14 (limit: 2285)\n     Memory: 82.6M\n        CPU: 452ms\n     CGroup: \/system.slice\/mariadb.service\n             \u2514\u25005695 \/usr\/sbin\/mariadbd\n\nJun 23 19:54:58 bookworm mariadbd[5695]: 2023-06-23 19:54:58 0 [Note] Plugin 'FEEDBACK' is disabled.\nJun 23 19:54:58 bookworm mariadbd[5695]: 2023-06-23 19:54:58 0 [Note] InnoDB: Loading buffer pool(s) from \/var\/lib\/mysql\/ib_buffer_pool\nJun 23 19:54:58 bookworm mariadbd[5695]: 2023-06-23 19:54:58 0 [Warning] You need to use --log-bin to make --expire-logs-days or --binlog-expire-logs-seconds work.\nJun 23 19:54:58 bookworm mariadbd[5695]: 2023-06-23 19:54:58 0 [Note] Server socket created on IP: '127.0.0.1'.\nJun 23 19:54:58 bookworm mariadbd[5695]: 2023-06-23 19:54:58 0 [Note] InnoDB: Buffer pool(s) load completed at 230623 19:54:58\nJun 23 19:54:58 bookworm mariadbd[5695]: 2023-06-23 19:54:58 0 [Note] \/usr\/sbin\/mariadbd: ready for connections.\nJun 23 19:54:58 bookworm mariadbd[5695]: Version: '10.11.3-MariaDB-1'  socket: '\/run\/mysqld\/mysqld.sock'  port: 3306  Debian 12\nJun 23 19:54:58 bookworm systemd[1]: Started mariadb.service - MariaDB 10.11.3 database server.\nJun 23 19:54:58 bookworm \/etc\/mysql\/debian-start[5720]: Upgrading MySQL tables if necessary.\nJun 23 19:54:58 bookworm \/etc\/mysql\/debian-start[5735]: Triggering myisam-recover for all MyISAM tables and aria-recover for all Aria tables\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"installing-passbolt-on-debian-12-1\">Installing Passbolt on Debian 12<\/h3>\n\n\n\n<p>Passbolt can be installed on Debian 12 directly from their official APT repos.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"install-passbolt-offical-repos-on-debian-12\">Install Passbolt Offical Repos on Debian 12<\/h4>\n\n\n\n<p>Execute the commands below to install Passbolt official APT repos on Debian 12;<\/p>\n\n\n\n<p>The command will also install some other required packages;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>wget https:\/\/download.passbolt.com\/ce\/installer\/passbolt-repo-setup.ce.sh<\/code><\/pre>\n\n\n\n<p>Once the download is complete, execute the script to install repos and other packages;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chmod +x passbolt-repo-setup.ce.sh<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>.\/passbolt-repo-setup.ce.sh<\/code><\/pre>\n\n\n\n<pre class=\"scroll-box\"><code>\n     ____                  __          ____\n    \/ __ \\____  _____ ____\/ \/_  ____  \/ \/ \/_\n   \/ \/_\/ \/ __ `\/ ___\/ ___\/ __ \\\/ __ \\\/ \/ __\/\n  \/ ____\/ \/_\/ (__  |__  ) \/_\/ \/ \/_\/ \/ \/ \/\n \/_\/    \\__,_\/____\/____\/_.___\/\\____\/_\/\\__\/\nOpen source password manager for teams\n-------------------------------------------------------------------------------\n\npassbolt repository setup is finished. You can now install passbolt CE edition with this command:\n\nsudo apt install passbolt-ce-server\n\n<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"install-passbolt\">Install Passbolt<\/h4>\n\n\n\n<p>Run system update and install Passbolt;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>apt install passbolt-ce-server<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"create-database-and-database-user-for-passbolt\">Create Database and Database user for Passbolt<\/h4>\n\n\n\n<p>During the installation, the installer will prompt you to create database and database user for Passbolt.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"943\" height=\"476\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/create-database.png\" alt=\"Install Passbolt on Debian 12\" class=\"wp-image-17417\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/create-database.png?v=1687513813 943w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/create-database-768x388.png?v=1687513813 768w\" sizes=\"(max-width: 943px) 100vw, 943px\" \/><\/figure>\n\n\n\n<p>You will be required to provide administrator logins to be able to create the database. If using default root account, press enter for the password to leave it empty.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"885\" height=\"442\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/login-to-database.png\" alt=\"\" class=\"wp-image-17418\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/login-to-database.png?v=1687513843 885w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/login-to-database-768x384.png?v=1687513843 768w\" sizes=\"(max-width: 885px) 100vw, 885px\" \/><\/figure>\n\n\n\n<p>Passbolt database user<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"925\" height=\"555\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/passbolt-database-user.png\" alt=\"\" class=\"wp-image-17419\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/passbolt-database-user.png?v=1687513898 925w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/passbolt-database-user-768x461.png?v=1687513898 768w\" sizes=\"(max-width: 925px) 100vw, 925px\" \/><\/figure>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"779\" height=\"449\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/database-password.png\" alt=\"Install Passbolt on Debian 12\" class=\"wp-image-17420\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/database-password.png?v=1687513947 779w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/database-password-768x443.png?v=1687513947 768w\" sizes=\"(max-width: 779px) 100vw, 779px\" \/><\/figure><\/div>\n\n\n<p>Create database itself;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"955\" height=\"559\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/database-name.png\" alt=\"\" class=\"wp-image-17422\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/database-name.png?v=1687514041 955w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/database-name-768x450.png?v=1687514041 768w\" sizes=\"(max-width: 955px) 100vw, 955px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"choose-passbolt-web-server\">Choose Passbolt Web Server<\/h4>\n\n\n\n<p>We use Nginx installed and configured by script itself.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"878\" height=\"505\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/apache-web-server.png\" alt=\"Install Passbolt on Debian 12\" class=\"wp-image-17423\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/apache-web-server.png?v=1687514062 878w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/apache-web-server-768x442.png?v=1687514062 768w\" sizes=\"(max-width: 878px) 100vw, 878px\" \/><\/figure>\n\n\n\n<p>The setup will now complete;<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>\nSetting up passbolt-ce-server (4.0.2-2) ...\n\n     ____                  __          ____  \n    \/ __ \\____  _____ ____\/ \/_  ____  \/ \/ \/_ \n   \/ \/_\/ \/ __ `\/ ___\/ ___\/ __ \\\/ __ \\\/ \/ __\/ \n  \/ ____\/ \/_\/ (__  |__  ) \/_\/ \/ \/_\/ \/ \/ \/    \n \/_\/    \\__,_\/____\/____\/_.___\/\\____\/_\/\\__\/   \n\n Open source password manager for teams\n-------------------------------------------------------------------------------\nA JWT key pair was successfully created.\nPublic key path: \/etc\/passbolt\/jwt\/jwt.pem\nSecret key path: \/etc\/passbolt\/jwt\/jwt.key\n ===================================================================== \n\n   Well done! Visit http:\/\/_ to finish installation \n\n ===================================================================== \nProcessing triggers for nginx (1.22.1-9) ...\n\n<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"passbolt-nginx-configuration\">Passbolt Nginx Configuration<\/h4>\n\n\n\n<p>Sample Passbolt Nginx config file;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/etc\/nginx\/sites-available\/nginx-passbolt.conf<\/code><\/pre>\n\n\n\n<pre class=\"scroll-box\"><code>\n#\n#  Passbolt.conf - Nginx configuration file to run the Passbolt software.\n#\n\nserver {\n\n  listen 80;\n  listen [::]:80;\n\n  # Managed by Passbolt\n  # server_name\n\n  client_body_buffer_size     100K;\n  client_header_buffer_size   1K;\n  client_max_body_size        5M;\n\n  client_body_timeout   10;\n  client_header_timeout 10;\n  keepalive_timeout     5 5;\n  send_timeout          10;\n\n  root \/usr\/share\/php\/passbolt\/webroot;\n  index index.php;\n  error_log \/var\/log\/nginx\/passbolt-error.log info;\n  access_log \/var\/log\/nginx\/passbolt-access.log;\n\n  # Managed by Passbolt\n  # include __PASSBOLT_SSL__\n\n  location \/ {\n    try_files $uri $uri\/ \/index.php?$args;\n  }\n\n  location ~ \\.php$ {\n    try_files                $uri =404;\n    include                  fastcgi_params;\n    fastcgi_pass             unix:\/run\/php\/__PHP_SOCK__;\n    fastcgi_index            index.php;\n    fastcgi_intercept_errors on;\n    fastcgi_split_path_info  ^(.+\\.php)(.+)$;\n    fastcgi_param            SCRIPT_FILENAME $document_root$fastcgi_script_name;\n    fastcgi_param            SERVER_NAME $http_host;\n    fastcgi_param PHP_VALUE  \"upload_max_filesize=5M \\n post_max_size=5M\";\n  }\n\n}\n<\/code><\/pre>\n\n\n\n<p>Note, update the value of the line;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>fastcgi_pass             unix:\/run\/php\/__PHP_SOCK__;<\/code><\/pre>\n\n\n\n<p>To the value of the listen option in the <strong><code>\/etc\/php\/8.2\/fpm\/pool.d\/www.conf<\/code><\/strong>.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>grep ^listen \/etc\/php\/8.2\/fpm\/pool.d\/www.conf<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>listen = \/run\/php\/php8.2-fpm.sock<\/code><\/pre>\n\n\n\n<p>Replace the value;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sed -i 's\/__PHP_SOCK__\/php8.2-fpm.sock\/' \/etc\/nginx\/sites-available\/nginx-passbolt.conf<\/code><\/pre>\n\n\n\n<p>Remove default configs;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>rm -rf \/etc\/nginx\/sites-available\/default \/etc\/nginx\/sites-enabled\/default<\/code><\/pre>\n\n\n\n<p>Check if there is any config issue with Nginx;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nginx -t<\/code><\/pre>\n\n\n\n<p>Output should be like;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nginx: the configuration file \/etc\/nginx\/nginx.conf syntax is ok\nnginx: configuration file \/etc\/nginx\/nginx.conf test is successful<\/code><\/pre>\n\n\n\n<p>Restart and enable Nginx to run on system boot;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl enable --now nginx php8.2-fpm<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"configure-nginx-with-tls-generate-tls-certificates\">Configure Nginx with TLS: Generate TLS certificates<\/h4>\n\n\n\n<p>If you want to use HTTPS, then you need to get your SSL\/TLS certs.<\/p>\n\n\n\n<p>Obtain your commercially trusted CA certificates and install them on the directories specified on the Apache configuration.<\/p>\n\n\n\n<p>If you want to use self-signed SSL certs then, generate using the command below;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>openssl req -x509 -nodes -newkey rsa:4096 \\\n-keyout \/etc\/ssl\/private\/ssl-cert-passbolt.key \\\n-out \/etc\/ssl\/certs\/ssl-cert-passbolt.pem -sha256 -days 3650 \\\n-subj \"\/C=US\/ST=Oregon\/L=Porland\/O=Company Name\/OU=Org\/CN=*.kifarunix-demo.com\"<\/code><\/pre>\n\n\n\n<p>Replace locality, company and domain details accordingly.<\/p>\n\n\n\n<p>Then see our updated config with HTTP to HTTPS redirection;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vim \/etc\/nginx\/sites-available\/nginx-passbolt.conf<\/code><\/pre>\n\n\n\n<pre class=\"scroll-box\"><code>\n#\n#  Passbolt.conf - Nginx configuration file to run the Passbolt software.\n#\nserver {\n  listen 80;\n  server_name passman.kifarunix-demo.com;\n\n  return 301 https:\/\/$host$request_uri;\n}\n\nserver {\n\n  listen 443 ssl;\n\n  # Managed by Passbolt\n  server_name passman.kifarunix-demo.com;\n\n  client_body_buffer_size     100K;\n  client_header_buffer_size   1K;\n  client_max_body_size        5M;\n\n  client_body_timeout   10;\n  client_header_timeout 10;\n  keepalive_timeout     5 5;\n  send_timeout          10;\n\n  root \/usr\/share\/php\/passbolt\/webroot;\n  index index.php;\n  error_log \/var\/log\/nginx\/passbolt-error.log info;\n  access_log \/var\/log\/nginx\/passbolt-access.log;\n\n  # Managed by Passbolt\n  # include __PASSBOLT_SSL__\n  ssl_certificate \/etc\/ssl\/certs\/ssl-cert-passbolt.pem;\n  ssl_certificate_key \/etc\/ssl\/private\/ssl-cert-passbolt.key;\n  ssl_protocols TLSv1.2 TLSv1.3;\n  ssl_prefer_server_ciphers on;\n  ssl_ciphers \"EECDH+AESGCM:EDH+AESGCM\";\n\n  location \/ {\n    try_files $uri $uri\/ \/index.php?$args;\n  }\n\n  location ~ \\.php$ {\n    try_files                $uri =404;\n    include                  fastcgi_params;\n    fastcgi_pass             unix:\/run\/php\/php8.2-fpm.sock;\n    fastcgi_index            index.php;\n    fastcgi_intercept_errors on;\n    fastcgi_split_path_info  ^(.+\\.php)(.+)$;\n    fastcgi_param            SCRIPT_FILENAME $document_root$fastcgi_script_name;\n    fastcgi_param            SERVER_NAME $http_host;\n    fastcgi_param PHP_VALUE  \"upload_max_filesize=5M \\n post_max_size=5M\";\n  }\n\n}\n<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>rm -rf \/etc\/nginx\/sites-enabled\/nginx-passbolt.conf<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>ln -s \/etc\/nginx\/sites-available\/nginx-passbolt.conf \/etc\/nginx\/sites-enabled\/nginx-passbolt.conf<\/code><\/pre>\n\n\n\n<p>Check Nginx for errors and restart;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>systemctl restart nginx php8.2-fpm<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"finalize-passbolt-configuration-on-browser\">Finalize Passbolt Configuration on Browser<\/h3>\n\n\n\n<p>Next, access Passbolt server from the browser either using IP or domain name based on your configuration to finalize the setup.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1146\" height=\"379\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/get-started-with-passbolt-configuration.png\" alt=\"\" class=\"wp-image-17429\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/get-started-with-passbolt-configuration.png?v=1687548143 1146w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/get-started-with-passbolt-configuration-768x254.png?v=1687548143 768w\" sizes=\"(max-width: 1146px) 100vw, 1146px\" \/><\/figure>\n\n\n\n<p>Passbolt is not configured yet! Yes, click <strong>Get started<\/strong> to start the setup and configuration.<\/p>\n\n\n\n<p>System health check;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1892\" height=\"550\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/system-health-check.png\" alt=\"\" class=\"wp-image-17430\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/system-health-check.png?v=1687548162 1892w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/system-health-check-768x223.png?v=1687548162 768w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/system-health-check-1536x447.png?v=1687548162 1536w\" sizes=\"(max-width: 1892px) 100vw, 1892px\" \/><\/figure>\n\n\n\n<p>Database connections;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1886\" height=\"580\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/set-database-connection-details.png\" alt=\"\" class=\"wp-image-17431\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/set-database-connection-details.png?v=1687548183 1886w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/set-database-connection-details-768x236.png?v=1687548183 768w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/set-database-connection-details-1536x472.png?v=1687548183 1536w\" sizes=\"(max-width: 1886px) 100vw, 1886px\" \/><\/figure>\n\n\n\n<p>GPG Keys setup. create new if you dont have one, otherwise import it if you already have it.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1657\" height=\"635\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/gpg-server-keys.png\" alt=\"\" class=\"wp-image-17432\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/gpg-server-keys.png?v=1687548500 1657w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/gpg-server-keys-768x294.png?v=1687548500 768w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/gpg-server-keys-1536x589.png?v=1687548500 1536w\" sizes=\"(max-width: 1657px) 100vw, 1657px\" \/><\/figure>\n\n\n\n<p>Configure Email Settings: Enter the details of your SMTP server.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1894\" height=\"838\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/email-settings.png\" alt=\"\" class=\"wp-image-17433\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/email-settings.png?v=1687548518 1894w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/email-settings-768x340.png?v=1687548518 768w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/email-settings-1536x680.png?v=1687548518 1536w\" sizes=\"(max-width: 1894px) 100vw, 1894px\" \/><\/figure>\n\n\n\n<p>You can test the settings by sending a test mail.<\/p>\n\n\n\n<p>The password required if using Gmail SMTP relay should be the app password. See how to create app password in <a href=\"https:\/\/kifarunix.com\/configure-postfix-to-use-gmail-app-passwords\/\" target=\"_blank\" rel=\"noreferrer noopener\">this guide<\/a>;<\/p>\n\n\n\n<p>Next Create Admin user account and proceed to complete the installation.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1139\" height=\"445\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/admin-user-account.png\" alt=\"\" class=\"wp-image-17434\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/admin-user-account.png?v=1687548544 1139w, https:\/\/kifarunix.com\/wp-content\/uploads\/2023\/06\/admin-user-account-768x300.png?v=1687548544 768w\" sizes=\"(max-width: 1139px) 100vw, 1139px\" \/><\/figure>\n\n\n\n<p>You will then be redirected to user setup page after the installation is done.<\/p>\n\n\n\n<p>To complete the account setup, proceed as follows;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"install-passbolt-browser-extension\">Install Passbolt Browser Extension<\/h4>\n\n\n\n<p>When the page loads, you are required to download and install plugin for your specific browser, in this demo, we using Firefox.<\/p>\n\n\n\n<p>Therefore, click on <strong>Download extension<\/strong> to download to install the Firefox Passbolt add-on extension.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"981\" height=\"629\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/install-firefox-passbolt-extension.png\" alt=\"Install Passbolt Password Manager on Debian 12\" class=\"wp-image-11535\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/install-firefox-passbolt-extension.png?v=1644520652 981w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/install-firefox-passbolt-extension-768x492.png?v=1644520652 768w\" sizes=\"(max-width: 981px) 100vw, 981px\" \/><\/figure><\/div>\n\n\n<p>You can also choose to allow the plugin to run on incognito.<\/p>\n\n\n\n<p>Next, click <strong>Refresh to detect the extension<\/strong>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"setup-passbolt-passphrase\">Setup Passbolt Passphrase<\/h4>\n\n\n\n<p>Next, create Passbolt passphrase. Note that <strong><em>this passphrase is the only passphrase you will need to remember from now on, choose wisely!<\/em><\/strong>. Set a complex passphrase that you can easily remember for protecting you secret keys.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"917\" height=\"709\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-passphrase.png\" alt=\"Install Passbolt Password Manager on Debian 12\" class=\"wp-image-11536\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-passphrase.png?v=1644520714 917w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-passphrase-768x594.png?v=1644520714 768w\" sizes=\"(max-width: 917px) 100vw, 917px\" \/><\/figure><\/div>\n\n\n<p>If you had an account before, you can re-use existing private key.<\/p>\n\n\n\n<p>Your password maybe stuck as &#8220;<strong>it is not part of an&nbsp;exposed data breach<\/strong>&#8220;, refresh the page and re-enter the password.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"download-and-save-passbolt-passphrase-private-key\">Download and Save Passbolt Passphrase private Key<\/h4>\n\n\n\n<p>Your secret key is now generated and encrypted with your passphrase and it is stored in your Passbolt add-on. Ensure that you make a copy of this key by downloading it and storing it in a different location.<\/p>\n\n\n\n<p>Thus download and save it securely.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"choose-a-color-to-identify-your-secret-token-with\">Choose a Color to Identify your Secret Token with<\/h4>\n\n\n\n<p>Next, choose a color to associate your security token with. <em>Security token will be displayed when your passphrase is requested, so you can quickly verify the form is coming from passbolt.&nbsp;This will help protect you from <a href=\"https:\/\/en.wikipedia.org\/wiki\/Phishing\" target=\"_blank\" rel=\"noreferrer noopener\">phishing attacks<\/a>.<\/em><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"907\" height=\"672\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/secret-token-color.png\" alt=\"Install Passbolt Password Manager on Debian 12\" class=\"wp-image-11537\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/secret-token-color.png?v=1644520750 907w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/secret-token-color-768x569.png?v=1644520750 768w\" sizes=\"(max-width: 907px) 100vw, 907px\" \/><\/figure><\/div>\n\n\n<h4 class=\"wp-block-heading\" id=\"passbolt-dashboard\">Passbolt Dashboard<\/h4>\n\n\n\n<p>Click Next to go to Passbolt dashboard.<\/p>\n\n\n\n<p>And there you go.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1275\" height=\"790\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-dashboard.png\" alt=\"Install Passbolt Password Manager on Debian 12\" class=\"wp-image-11538\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-dashboard.png?v=1644520815 1275w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-dashboard-768x476.png?v=1644520815 768w\" sizes=\"(max-width: 1275px) 100vw, 1275px\" \/><\/figure><\/div>\n\n\n<p>You can now start using Passbolt to store passwords\/share them as you wish.<\/p>\n\n\n\n<p>Your Passbolt password manager is now ready. That marks the end of our guide.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"reference\">Reference<\/h3>\n\n\n\n<p><a href=\"https:\/\/help.passbolt.com\/hosting\/install\" target=\"_blank\" rel=\"noreferrer noopener\">Install Passbolt from source<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"related-tutorials\">Related Tutorials<\/h3>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/install-and-setup-passbolt-password-manager-on-ubuntu\/\" target=\"_blank\" aria-label=\"Install and Setup Passbolt Password Manager on Ubuntu 20.04 (opens in a new tab)\" rel=\"noreferrer noopener\" class=\"rank-math-link\">Install and Setup Passbolt Password Manager on Ubuntu 20.04<\/a><\/p>\n\n\n\n<p><a aria-label=\"undefined (opens in a new tab)\" rel=\"noreferrer noopener\" class=\"rank-math-link\" href=\"https:\/\/kifarunix.com\/install-syspass-password-manager-on-ubuntu-18-04\/\" target=\"_blank\">Install sysPass Password Manager on Ubuntu 18.04<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/install-teampass-password-manager-on-ubuntu-18-04\/\" target=\"_blank\" aria-label=\"undefined (opens in a new tab)\" rel=\"noreferrer noopener\">Install TeamPass Password Manager on Ubuntu 18.04<\/a><\/p>\n\n\n\n<p><a aria-label=\"undefined (opens in a new tab)\" href=\"https:\/\/kifarunix.com\/enforce-password-complexity-policy-on-ubuntu-18-04\/\" target=\"_blank\" rel=\"noreferrer noopener\">Enforce Password Complexity Policy On Ubuntu 18.04<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/setup-ldap-self-service-password-tool-on-centos-8\/\" target=\"_blank\" aria-label=\"undefined (opens in a new tab)\" rel=\"noreferrer noopener\">Setup LDAP Self Service Password Tool on CentOS 8<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this tutorial, you will learn how to install Passbolt on Debian 12. Passbolt is is a free, open source, self-hosted, extensible, OpenPGP based password<\/p>\n","protected":false},"author":10,"featured_media":11542,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[34,121,339,352],"tags":[6937,6936,6935,6938],"class_list":["post-17408","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-howtos","category-password-managers","category-password-policies","tag-debian-12-passbolt","tag-debian-12-password-manager","tag-install-passbolt-debian-12","tag-passbolt-debian-12","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/17408"}],"collection":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/comments?post=17408"}],"version-history":[{"count":16,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/17408\/revisions"}],"predecessor-version":[{"id":20766,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/17408\/revisions\/20766"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/media\/11542"}],"wp:attachment":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/media?parent=17408"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/categories?post=17408"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/tags?post=17408"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}