> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.itential.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.itential.com/_mcp/server.

# iagctl server

Start the gateway server.

The `iagctl server` command launches a gateway server that other gateway clients can connect to. Before you run this command, set the gateway application mode to `server` using the `GATEWAY_APPLICATION_MODE` configuration variable.

## Syntax

```bash
iagctl server [flags]
```

## Usage notes

### Connect to Gateway Manager

You can connect your Gateway deployment to Gateway Manager and Itential Platform by enabling `GATEWAY_CONNECT_ENABLED` and setting a certificate with the `GATEWAY_CONNECT_CERTIFICATE_FILE` configuration variable.

When the gateway connects successfully, you'll see a log message: `connected to gateway manager at {{host:port}}`.

### Admin user creation

On the first launch of `iagctl server`, the gateway logs temporary credentials for the admin account. The log entry resembles the following:

```bash
 CREATED TEMPORARY ADMIN
 username: admin
 password: V1j*tiXS@q2ey!k21(mHjJ9@f70zit(%
```

A configured gateway client can then connect to the server by running `iagctl login admin`.

For more information on resetting passwords, see [Manage users and credentials](/itential-gateway/5/manage-users-credentials).

### Admin user password recovery

If you forget the admin account credentials, you can recover the account by running `iagctl server --recover-admin-user`. This process requires access to the server with two terminals open. The gateway prompts you to enter a new password for the `admin` user.

## Examples

### Start the gateway server

```bash
iagctl server
```

## Options

```bash
  --cert-file string          Certificate file to use. (default "/etc/gateway/gateway.crt")
  -h, --help                  Help for server
  --private-key-file string   Private key file to use. (default "/etc/gateway/gateway.key")
  --recover-admin-user        Start a recovery process if the admin user credentials are lost.
```

## Options inherited from parent commands

```bash
  --profile string   Specify the client profile to use (case-insensitive, defaults to [client] section)
  --config string   Path to the configuration file
  --raw             Display the result of the command in raw format
  --verbose         Enable verbose output
```