GenieACS TR-069 CPE Auto Configuration Server

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Application Stack

The four GenieACS services (CWMP device endpoint, northbound REST API, file server and management UI) run as systemd units under a dedicated unprivileged service account, backed by a local MongoDB datastore. The management UI is fronted by an nginx reverse proxy on port 80. The northbound API and UI process are bound to the loopback interface; the device-facing CWMP and file-server ports listen on all interfaces so your CPE fleet can reach them. The MongoDB device database lives on a dedicated, independently resizable EBS volume kept separate from the operating system disk.

## Secure By Default

Many pre-built images ship with shared or default passwords - a common vulnerability that exposes instances immediately after launch. This image eliminates that risk entirely:

• A unique UI admin password is generated for every instance on its first boot and stored in a root-only file
• The admin user and a full permission set are created in the database so anonymous console access is disabled
• A unique token-signing secret is generated per instance
• A unique database password is generated per instance and MongoDB authentication is enabled
• No shared or default credential ships in the image; build-time state is wiped before capture

## Ready To Use

Browse to the instance on port 80, sign in with the generated admin password, and point your CPE at the CWMP endpoint to begin auto-provisioning. Define presets and provisions to push configuration, firmware and parameter changes across your device fleet, and use the northbound API to integrate the ACS with your OSS/BSS systems. A built-in self-test proves the server ingests and manages a device on every boot.

## Quick Evaluation Path

Launch the AMI on a small instance with hourly billing to evaluate the full stack risk-free. Point a test CPE device at the CWMP endpoint, verify onboarding, and explore presets and the northbound API. Cancel anytime - there is no long-term commitment required.

## What You Avoid By Using This AMI

• Manual Node.js and MongoDB installation, hardening and version management
• Writing and debugging four systemd service units and an nginx reverse proxy
• Building the admin user and permission model by hand
• Generating and securely storing per-instance secrets
• Ongoing maintenance and security patching without expert guidance

## Use Cases

• ISP and network operator remote provisioning and management of CPE at scale
• Zero-touch onboarding and firmware campaigns across a router, modem or ONT fleet
• A private, in-your-own-VPC TR-069 ACS with full data ownership and API-driven automation