Overview
MeshCentral sign-in
The MeshCentral sign-in page served behind nginx on first boot, prompting for the per-instance administrator credentials generated at launch.
MeshCentral sign-in
My Devices console
Add a device group and agent
My Server settings
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Overview
MeshCentral is a self-hosted remote device management and remote-desktop console - an open-source alternative to hosted remote-support and RMM tools. Install a small agent on your Windows, macOS and Linux devices and they appear in a central web console where you can take remote-desktop control, open a terminal, transfer files, view hardware and power state, and run management tasks - all from your own server, within your own VPC. This image delivers MeshCentral fully installed and running behind an nginx reverse proxy, so your management console is serving within minutes of launch.
Why Self-Hosted?
Unlike hosted RMM platforms that charge per seat and route your session data through third-party infrastructure, MeshCentral on your own AWS instance gives you:
- No per-device licensing fees - add unlimited agents without tiered pricing
- Complete data sovereignty - device inventory, session recordings, and audit logs never leave your VPC
- No vendor uptime dependency - your management console runs on infrastructure you control
- Compliance-friendly architecture - keep sensitive remote-access data on-premises to satisfy data-residency requirements
Security
On first boot, a one-shot service generates a fresh administrator account with a password unique to that instance and records the credentials in a root-only file. MeshCentral also generates its own server and agent TLS certificates fresh for every deployment - no shared or default credentials and no reused certificates ship in the image. Self-signup is disabled by default so only accounts you explicitly create can sign in. All traffic between the browser, the console, and remote agents traverses TLS-encrypted WebSocket tunnels through the nginx reverse proxy. An audit log records every remote session, login attempt, and administrative action for post-incident review and compliance reporting.
Application Stack
MeshCentral runs natively under Node.js on a dedicated service account bound to the loopback interface, fronted by nginx over HTTPS with the WebSocket upgrade its console and agent tunnels require already configured. The service starts on boot and restarts on failure. MeshCentral's configuration, its embedded database of users, device groups and nodes, and its generated certificates live on a dedicated data disk so they are independently resizable and separate from the operating system disk.
Manage Your Devices From One Console
Group devices into device groups and install the MeshCentral agent from the console with a per-group installer or one-line command. Take full remote-desktop control, open a remote terminal, browse and transfer files, and see live hardware, session and power state. Wake, reboot and shut down machines, run commands across groups, and keep an event and audit history. Role-based access lets you invite users and scope what each can see and do.
Use Cases
- Managed Service Providers (50-500 endpoints): An MSP technician receives an alert, opens the browser console, takes remote-desktop control of the affected workstation, resolves the ticket without a VPN, and the entire session is audit-logged within the provider's own infrastructure.
- Healthcare and education IT teams needing data-residency compliance for remote support sessions that must not traverse third-party servers.
- Self-hosted remote access to servers and lab machines for engineering teams who want auditable, private connectivity without SaaS dependencies.
- Help-desk operations supporting a fleet of Windows, macOS and Linux workstations from a single browser-based console.
Getting Started
Open the web UI in your browser, read the generated password from the root-only file, sign in as the administrator, create a device group and install the agent on your first device. A built-in health endpoint answers on the reverse proxy for load-balancer and uptime checks. For production, point a real domain at the instance and configure HTTPS with your own certificate.
To evaluate the product, launch the AMI and connect a handful of test devices to confirm the remote-desktop, terminal, and file-transfer workflows meet your requirements.
cloudimg Support
24/7 technical support by email and live chat. Our engineers help with deployment, domain and HTTPS configuration, agent rollout strategy, device-group and access-control design, storage planning, and upgrades.
Highlights
- Unlimited agents with no per-seat fees - install the MeshCentral agent on any number of Windows, macOS and Linux devices and manage them all from a single browser-based console. Keep complete data sovereignty: device inventory, session recordings, and audit logs stay within your own VPC, never traversing third-party infrastructure. A private, auditable alternative to hosted RMM platforms.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Description | Cost/hour |
|---|---|---|
t3.small Recommended | t3.small | $0.04 |
t2.micro | t2.micro instance type | $0.04 |
t3.micro | t3.micro instance type | $0.04 |
c5a.12xlarge | c5a.12xlarge instance type | $0.24 |
c5a.16xlarge | c5a.16xlarge instance type | $0.24 |
c5a.24xlarge | c5a.24xlarge instance type | $0.24 |
c5a.2xlarge | c5a.2xlarge instance type | $0.24 |
c5a.4xlarge | c5a.4xlarge instance type | $0.24 |
c5a.8xlarge | c5a.8xlarge instance type | $0.24 |
c5a.large | c5a.large instance type | $0.08 |
Vendor refund policy
Refunds available on request.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release of MeshCentral 1.2.1 as a ready-to-use self-hosted remote management console with the site-administrator account and server certificates generated on first boot.
Additional details
Usage instructions
Connect via SSH on port 22 as the default login user for your operating system variant (for the Ubuntu 24.04 variant the user is ubuntu). Retrieve the generated admin credentials with: sudo cat /root/meshcentral-credentials.txt. Open MeshCentral in a browser at https://<instance-public-ip>/ and sign in as the administrator (username admin) with the generated password. The image ships with a per-instance self-signed certificate, so your browser shows a certificate warning on first visit - accept it to proceed (a plain http://<instance-public-ip>/ request redirects to https). Create a device group, then install the MeshCentral agent on a device from the console to manage it. The application is served by nginx over HTTPS on port 443 (MeshCentral runs on loopback 4430); an unauthenticated health endpoint is available at http://<instance-public-ip>/healthz. MeshCentral's database and certificates live on a dedicated data disk mounted at /var/lib/meshcentral. The instance security group opens ports 22, 80 and 443. MeshCentral runs under systemd: systemctl status meshcentral; the reverse proxy runs under systemd: systemctl status nginx. Self-signup is disabled; only administrators can create additional accounts. For production, point a domain at the instance and install a trusted certificate (for example nginx with Let's Encrypt).
Resources
Vendor resources
Support
Vendor support
cloudimg Support
cloudimg provides 24/7 technical support for this product by email and live chat.
What We Help With:
-
Initial deployment and instance configuration
-
Domain setup and HTTPS/reverse-proxy configuration
-
Agent rollout strategy and device-group design
-
Role-based access control and user management
-
Storage planning, data-disk resizing, and backup guidance
-
MeshCentral upgrades and patch application
-
Performance tuning and troubleshooting
-
General inquiries: handled within standard business-day turnaround
How to Reach Us:
- Email: support@cloudimg.co.uk
- Live chat: available 24/7
If you experience any issues with the product - including deployment problems, configuration questions, or billing concerns - contact us through either channel and our engineers will assist you. For refund requests, please reach out via email with your AWS Marketplace order details and we will process your request promptly.
Getting Started:
After launching your instance, if you need help with domain configuration, agent deployment across your fleet, or integrating MeshCentral into your existing infrastructure, our team can guide you through the process step by step.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.