---
title: "TrustBridge Frontend: First Login & Dashboard"
description: "TrustBridge Frontend: First Login & Dashboard"
---

[Skip to content](https://portal.sandgrain.eu/knowledge-base/trustbridge-frontend-first-login-dashboard#main-content)

English

Show submenu for translations

![SandGrain\_Logo\_RGB\_white-bijgesneden (1)](https://portal.sandgrain.eu/hs-fs/hubfs/SandGrain_Logo_RGB_white-bijgesneden%20(1).png?width=427&height=83&name=SandGrain_Logo_RGB_white-bijgesneden%20(1).png)

Open main navigation

Close main navigation

- English
  
  Show submenu for translations
- [Contact us](https://portal.sandgrain.eu/login)

[Contact us](https://portal.sandgrain.eu/login?hsLang=en)

 How can we help you?

- There are no suggestions because the search field is empty.

1. [Knowledge Base](https://portal.sandgrain.eu/knowledge-base?hsLang=en)
2. [User Documentation](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en)
3. [TrustBridge](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#trustbridge)

October 6, 2026

# TrustBridge Frontend: First Login & Dashboard

**Who this is for:** Administrators using the TrustBridge web interface for the first time.

**What you'll accomplish:** Get introduced to TrustBridge, reach the frontend, complete first-run setup, and land on the dashboard.

### What is TrustBridge?

TrustBridge is the management and control-plane layer of the system.

It is a conventional web-app stack (a NestJS backend TrustBridge-Be, a React frontend TrustBridge-FE, Postgres, and a Mosquitto broker) that sits above the cryptographic authentication engine and manages the lifecycle and policy of devices without ever performing the mutual-auth crypto itself. That crypto, the CW/RW/HCW/HRW challenge-response against the security chip, is done by the sandgrain-sdk layer (device, gateway, and sdk\_cloud), which talks to CyberRock, the identity and crypto authority, over HTTP for transaction IDs, requestRW/requestHRW, token-serials, and claiming. TrustBridge orchestrates around those two planes, and its modules are all management and policy: operator login and RBAC, tenants and auto-claim via the tenant-api, device enrollment, grouping and profiles, whitelisting, presence, and audit and traceability ingestion. It connects to the SDK world over MQTT (sandgrain/v1/... topics for whitelist push and gw\_log/auth\_result ingest) and to CyberRock over HTTP.

The important distinction is that it is the orchestration and management plane, not the data and trust plane. Pull TrustBridge out and the device and gateway can still mutually authenticate (that is why standalone single-Pi setups work); you just lose enrollment, whitelisting, tenant claiming, presence, and the dashboards. Pull the SDK or CyberRock out and TrustBridge has nothing to manage and no auth happens at all.

Open the frontend

Access the frontend at:

- **Localhost:** `http://localhost:5173`
- **LAN** (other devices on the same Wi-Fi/Ethernet, e.g. Raspberry Pis): `http://<ip-of-the-machine-running-the-docker-stack>:5173`, or `http://<mDNS-hostname>:5173`

### First-run login

On the first run, the username and password are both **`TrustAdmin`**.

> **![TrustBridge frontend login screen.](https://portal.sandgrain.eu/hs-fs/hubfs/image51.png?width=670&height=300&name=image51.png)**
> 
> The TrustBridge login page.

> **If the first login is refused on a re-install,** an old database volume is likely present. Run `./TrustBridge/TrustBridge-BE/start-all.sh wipe` (this deletes all TrustBridge data) and start again.

### Complete setup

Proceeding brings up the setup section. Work through it to configure your instance.

> **![TrustBridge first-run setup screens](https://portal.sandgrain.eu/hs-fs/hubfs/image52.png?width=670&height=290&name=image52.png)**
> 
> **![TrustBridge first-run setup screens](https://portal.sandgrain.eu/hs-fs/hubfs/image53.png?width=670&height=281&name=image53.png)**
> 
> **![TrustBridge first-run setup screens](https://portal.sandgrain.eu/hs-fs/hubfs/image54.png?width=670&height=284&name=image54.png)**
> 
> The first-run setup steps*.*

### The dashboard

After setup, you land on the dashboard, your home base for device management.

> **![TrustBridge dashboard after setup.](https://portal.sandgrain.eu/hs-fs/hubfs/image55.png?width=670&height=299&name=image55.png)**
> 
> The TrustBridge dashboard.

### What to do next

Before enrolling devices, set up the classifications they'll reference:

1. Create **Categories**, then **Sub-Categories** and **Tags**, see [*Organizing Devices: Categories, Sub-Categories & Tags*](https://portal.sandgrain.eu/knowledge-base/organizing-devices-categories-sub-categories-tags?hsLang=en).
2. Create a **Device Profile** and optionally a **Device Group**, see [*Device Profiles & Groups*](https://portal.sandgrain.eu/knowledge-base/device-profiles-groups?hsLang=en).
3. Then **enroll a device**, see [*Enrolling a Device*](https://portal.sandgrain.eu/knowledge-base/enrolling-a-device?hsLang=en).

---

*Related articles: [Organizing Devices: Categories, Sub-Categories & Tags](https://portal.sandgrain.eu/knowledge-base/organizing-devices-categories-sub-categories-tags?hsLang=en) · [Device Profiles & Groups](https://portal.sandgrain.eu/knowledge-base/device-profiles-groups?hsLang=en) · [Enrolling a Device](https://portal.sandgrain.eu/knowledge-base/enrolling-a-device?hsLang=en) · [Device & Token Lifecycles](https://portal.sandgrain.eu/knowledge-base/device-token-lifecycles?hsLang=en) · [SDK + TrustBridge on Windows](https://portal.sandgrain.eu/knowledge-base/walkthrough-sdk-trustbridge-on-windows?hsLang=en) · [SDK + TrustBridge on Linux & macOS](https://portal.sandgrain.eu/knowledge-base/walkthrough-sdk-trustbridge-on-linux-macos?hsLang=en)*

- [User Documentation](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#main-content)

    - [Quick Starter Guide](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#quick-starter-guide)
    - [User Manual](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#user-manual)
    - [Whitepaper](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#whitepaper)
    - [Token Leaflet](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#token-leaflet)
    - [Claim Token Procedure](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#claim-token-procedure)
    - [Daisy Chain](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#daisy-chain)
    - [Release Note](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#release-note)
    - [Naming Convention](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#naming-convention)
    - [SandGrain SDK](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#sandgrain-sdk)
    - [TrustBridge](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#trustbridge)
- [API Documentation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#main-content)

    - [Device API Integration](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#device-api-integration)
    - [Daisy Chain and Attestation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#daisy-chain-and-attestation)
- [SDK](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#main-content)

    - [Core Functions](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#core-functions)
    - [SandGrain SDK](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#sandgrain-sdk)

[![SandGrain\_Logo\_RGB\_white-bijgesneden (1)-1](https://portal.sandgrain.eu/hs-fs/hubfs/SandGrain_Logo_RGB_white-bijgesneden%20(1)-1.png?width=427&height=83&name=SandGrain_Logo_RGB_white-bijgesneden%20(1)-1.png "SandGrain_Logo_RGB_white-bijgesneden (1)-1")](https://portal.sandgrain.eu/?hsLang=en)

<https://www.facebook.com/> <https://www.twitter.com/> <https://www.instagram.com/> <https://podcasts.apple.com/> [mailto:email@email.com](mailto:email@email.com)

Copyright © 2026, sandgrain.eu