Set the Appearance Theme

1. In the Appearance Settings area, click Edit.
2. In the Set Appearance Theme dialog box, select a theme color and click Confirm.
3. Return to the page and check the Theme and interface colors.

Set the Platform Name and Branding

1. In the Custom UI area, click Edit.
2. Update the platform text and images as needed.

   Setting	Description
   Platform Name	Set the name displayed in the portal, up to 25 characters.
   Platform Description	Set the portal description, up to 500 characters.
   Logo, White Logo	Provide a regular logo and a white logo for dark backgrounds. JPG, JPEG, PNG, and SVG files are supported. Follow the dialog box instructions and select files no larger than 2 MB.
   Browser Icon (Favicon)	Set the browser tab icon. Use an ICO file no larger than 2 MB.

3. Check the name, description, and images, then click Confirm.
4. Check the information displayed on the page, the portal logos, and the browser tab icon.

To restore the initial settings, click Reset to Default in the Custom UI editing dialog box. Read the message in Reset to Default Style, then click Confirm to proceed.

Set Login and Session Policies

Set Password and Login Protection

Set Data Retention and Expiration Policies

Check the recycle bin retention period together with the handling method for expired resources. Configure message retention separately.

Configure Platform Backups

Use Platform Backup to configure a backup schedule and destination. You can also start a backup manually when saving the configuration. Before you begin, prepare the destination directory and required access credentials.

1. Click the edit button to the right of Platform Backup.
2. For scheduled execution, enable Scheduled Backup and select a Backup Cycle. Weekly backups require days of the week and an execution time; daily backups require an execution time.
3. Select a Backup Mode and enter the corresponding destination and credentials.

   Backup Mode	Required Information
   Local	Local directory.
   SMB Storage, SFTP Server	Remote address, username, password, and remote directory.
   NFS Server	Remote address and remote directory.
   Object Storage	Remote address, AccessKey ID, AccessKey Secret, storage bucket, and remote directory.

4. Check the backup schedule and destination. Click Save to save the configuration, or Save and Run Now to also start a backup.
5. After saving, reopen Platform Backup and check the configuration. After running a backup, check for the generated backup files at the destination.

Understand Default and Custom Access Entries

The default HTTP access entry on port 8100 is retained. Custom access entries provide additional HTTP and HTTPS access methods without affecting the default entry.

Before configuring access, prepare the domain, ports, and the certificate and private key required for HTTPS. Ensure that users can reach the target address and ports from their network. Configure DNS separately if you use a domain.

Configure a Custom Access Entry

1. In the Custom access entry area, turn on Enable custom entry.
2. Enter a Domain (optional) as needed. Enter only the domain, without a scheme, port, or path. Leave it empty to accept any host.
3. Select the access methods to enable.

   Access Method	Configuration
   Custom HTTP	Turn on Custom HTTP and enter an HTTP port.
   Custom HTTPS	Turn on Custom HTTPS, enter an HTTPS port, and upload the corresponding certificate.

4. Check the selected protocols and ports. Enable at least one protocol when enabling a custom entry. Ports must be integers from 1 to 65535, excluding 8080. HTTP and HTTPS ports must differ.

If HTTPS is required, continue with certificate preparation. After completing the configuration, click Save and apply and check the target access entry.

Upload or Replace a Certificate and Apply Settings

After turning on Enable custom entry and Custom HTTPS, you can upload or replace a certificate. Each file must be nonempty and no larger than 1 MiB. In a PEM certificate chain, put the server certificate first. A certificate bundle must contain exactly one private key.

1. Under Current certificate, click Upload / replace certificate.
2. Select an Upload method.

   Upload Method	Instructions
   Certificate and private key	Select a file for Certificate file and another for Private key file.
   P12 / PFX bundle	Select the corresponding P12 or PFX file for Certificate bundle.

3. If the file requires a password, enter it in File password (optional). Check the files and click Upload / replace certificate.
4. After the upload succeeds, return to the page and check the identifier under Current certificate and the Pending application status.
5. Check the domain, protocols, ports, and certificate, then click Save and apply.

Uploading only prepares the certificate. You must still save and apply the page settings.

Check Settings and Restore Defaults

After saving and applying, follow the page instructions to check the saved settings, then access the portal using the target protocol, domain or IP address, and port. To reload the configuration, click Refresh saved settings when provided on the page.

The page displays the last successfully saved settings, which do not represent the current runtime state. After a message indicates that the configuration application request has been submitted, refresh later and check whether the target address is accessible. If the operation fails, some changes may already have taken effect. Check through the default entry before retrying.

To restore the default settings:

1. Click Restore default settings.
2. Read the confirmation message: restoring defaults closes custom HTTP and HTTPS entries, clears the domain and certificate binding, and discards unsaved changes. The default entry and uploaded certificate files are retained.
3. Check the impact and click Confirm.
4. Follow the page instructions to refresh the saved settings and check access through the default entry.

Prepare for Integration

Confirm the authentication protocol with your organization's authentication service administrator. Prepare the corresponding server addresses, access credentials, callback addresses, and user attribute information. The authentication service must be able to communicate with ZCenter, and addresses used for browser redirects must also be accessible from users' networks.

Authentication server configuration and the login switch are maintained separately. Check Third-Party User Login under System Configuration > Platform Settings > Global Settings and enable it when third-party login is needed.

AD and LDAP cannot be configured at the same time. If an AD or LDAP authentication server already exists, you cannot add another AD or LDAP configuration.

Add an Authentication Server

1. In the navigation pane, choose System Configuration > Platform Settings > Third-Party Authentication and click Add Third-Party Authentication Server.
2. In the Server Configuration step, select the Type and enter a Description as needed.
3. Complete Configuration Info for the selected protocol.

   Protocol	Configuration Details
   OIDC	Select an Authentication Supplier. For Standard Protocol, configure Client ID, Client Secret, Scope, Authorization Request URL, Token Request URL, Userinfo Request URL, Logout URL, and Redirect URL as applicable. Obtain the addresses and attributes from the authentication service.
   OAuth 2.0	Select an Authentication Supplier. For Standard Protocol, configure Client ID, Client Secret, Scope, Authorization Request URL, Token Request URL, and Redirect URL as applicable.
   CAS	Select Standard or Non-standard. For the standard method, enter the authentication server URL and redirect URL. For the non-standard method, enter the login URL, logout URL, authorization code verification URL, and redirect URL as shown on the page.
   LDAP, AD	Enter Primary Server IP Address/Domain Name, IP Port, Base DN, User DN, and Password. Click Test Connection to check the server connection settings. Correct any errors before continuing.

4. For OIDC, OAuth 2.0, LDAP, and AD, continue to Sync Mapping Rules. For CAS, go directly to Review and Confirm.

Configure User Mappings and Confirm Information

Mappings specify which attributes in the authentication service correspond to user information in ZCenter. Confirm the attribute names with the authentication service administrator and configure them for the selected protocol:

1. After completing the required mappings, go to Review and Confirm and check the protocol, server configuration, and mappings.
2. Click Save Configuration.
3. Return to Third-Party Authentication and check the saved server configuration. When signing in with a third-party account, verify login using the entry or login type displayed on the login page.

Maintain Authentication Servers

On the Third-Party Authentication page, locate the target configuration and check its protocol and server information before performing an operation.

Edit Personal Information

1. Open Account Information and check the current username and email address.
2. Click the edit button next to the avatar to open Edit Account Information.
3. Update the Avatar and Email as needed. JPG, JPEG, and PNG avatars are supported, with a maximum file size of 2 MB as indicated in the dialog box. Username is read-only here.
4. Check the information and click OK.
5. Return to Account Information and check the avatar and email address.

Change the Login Password

After signing in with a local account, use the following steps to change your own password.

1. Open Account Security. You can also click the user avatar in the upper-right corner and select Account Security in the user panel.
2. Enter the Current Password. Enter a New Password that meets the requirements displayed on the page, then enter it again in Confirm Password.
3. Check the entries and click Save. If the current password is reported as incorrect or the two new passwords do not match, correct the entries and save again.