Get started
Install in minutes, on a server you own.
On a fresh Linux server, one line checks the machine, installs what it needs, verifies the download, installs Authcha and activates your license. You get the console address and an admin password at the end.
$ curl -fsSL https://get.authcha.cloud | sudo bash -s -- --trial you@company.com ✓ Checked: system, memory, disk, ports, clock ✓ Docker ready ✓ Authcha downloaded and verified (SHA-256 + Ed25519 signature) ✓ Authcha is running ✓ License activated for this server Console: https://radius.example.com (admin password printed once)
Start a 30-day trial
Every module, up to 100 network devices, on your own hardware. We email you a 6-digit code; the installer asks for it. No credit card.
$ curl -fsSL https://get.authcha.cloud | sudo bash -s -- --trial you@company.com --hostname radius.example.com
Already have a license?
Use the license key Authcha sent you. It starts with AUTHCHA-.
$ curl -fsSL https://get.authcha.cloud | sudo bash -s -- --license AUTHCHA-… --hostname radius.example.com
Replace radius.example.com with the DNS name your console will use. Passkeys, links in emails and the posture agent rely on it.
What happens, in five steps
- Check. The installer checks the system, memory, disk, ports and the clock.
- Prepare. It installs Docker from Docker's official repository, if it is missing.
- Verify. It downloads Authcha and checks its SHA-256 and Ed25519 signature. Nothing is installed if either check fails.
- Install. It starts every component and generates all secrets and a strong admin password.
- Ready. It activates your license for this server and prints the console address, username, password and license status.
After that, sudo authcha manages the installation: status, upgrade (verified, backed up, rolled back automatically if something goes wrong), backup, logs, license and uninstall.
What you need
A Linux server and 4 GB of memory to try it. Linux x86-64 only.
| Operating system | Ubuntu 22.04 or 24.04, Debian 12 or 13, RHEL, Rocky Linux or AlmaLinux 9 (x86_64) |
|---|---|
| Hardware | 2 CPU cores, 4 GB RAM and 20 GB disk to evaluate; 4–8 cores, 8–16 GB RAM and 50 GB SSD for production |
| Network | Outbound HTTPS to get.authcha.cloud and license.authcha.cloud (a proxy works). Inbound 443/tcp for the console and 1812–1813/udp for RADIUS. Optional: 2083/tcp for RadSec, and 8444/tcp and 80/tcp only if devices enroll their own certificates with EST or SCEP. |
Prefer to check the script first?
The installer is a readable shell script, signed with the same key as every Authcha release.
Show the commands
curl -fsSLO https://get.authcha.cloud/install.sh curl -fsSLO https://get.authcha.cloud/install.sh.sig curl -fsSLO https://get.authcha.cloud/release-public.pem openssl pkeyutl -verify -pubin -inkey release-public.pem -rawin -in install.sh -sigfile install.sh.sig sudo bash install.sh --trial you@company.com --hostname radius.example.com
No internet on the server?
On any connected computer, download and verify the release with --download-only DIR, carry the bundle, its .sig and install.sh to the server, and install with --bundle. Licenses for air-gapped sites are activated offline with a certificate. The installation guide has the details.