Eval Kit Quick Start Guide
Time to Admin UI: typically 15 to 20 minutes after you click Create stack. First-Time Setup runs automatically (headless) - you do not walk the wizard yourself.
Have your own VPC and Active Directory® already? Use the standard Quick Start Guide (Single-AZ or Dual-AZ) instead.
What the Eval Kit is
The Eval Kit is a self-contained, single-AZ Marketplace launch that stands up everything you need to try Roadrunner SMB™ without bringing your own network or directory.
| Piece | What you get |
|---|---|
| Single-AZ VPC | Private + public subnets, NAT, and supporting networking in one Availability Zone |
| Windows Server® AD / DC | A deploy-time domain controller for corp.acme.com (NetBIOS ACME) |
| Single-AZ Roadrunner SMB | Nested appliance stack (default 2 nodes) on Amazon EFS®, behind an internet-facing NLB |
Headless First-Time Setup joins the appliance to that domain and finishes product setup before you log in. The stack self-uninstalls after EvalLifetimeDays (default 30, maximum 30), removing every billable resource it created.
Step 1 - Subscribe and launch
Open Roadrunner SMB in AWS Marketplace and Subscribe.
Choose the Eval Kit delivery option → Continue to Configuration → pick your Region → Continue to Launch.
Choose Launch CloudFormation® → Launch.
On the Create stack page you typically see:
Parameter What to enter AdminAccessCidr Your public IP as x.x.x.x/32(or leave0.0.0.0/0for open Admin UI access during evaluation)InstanceType c6i.2xlarge(default) unless you need a smaller or larger sizeEvalLifetimeDays 30(default) - days until automatic self-uninstallAcknowledge the capability checkboxes, then Create stack.
Wait for the parent stack
RoadrunnerSMB-Evalto reachCREATE_COMPLETE.
Parent stack name is typically RoadrunnerSMB-Eval. Nested stacks under it create the VPC/DC and the Roadrunner SMB appliance - use the parent for day-one Outputs (next steps).
Step 2 - Find the Admin URL (CloudFormation Outputs)
Open the AWS CloudFormation console in the same Region as your stack.
Select the parent stack:
RoadrunnerSMB-Eval(not a nested...-EvalStack-...or...-InnerStack-...name).Open the Outputs tab.
Use these outputs:
Output Use it for AdminUIUrlAdmin console URL ( https://...) - open this in your browserEvalAdminLoginSuggested domain admin login (for example ACME\eval-admin)EvalCredentialsConsoleUrlOne-click link into Secrets Manager for passwords EvalCredentialsSecretArnSecret ARN for CLI / automation NlbDnsNameSMB hostname ( \\<NlbDnsName>\<sharename>) after you create a shareEvalLifetimeDays/EvalTeardownAtWhen automatic self-uninstall is scheduled
Confirm the Admin URL starts with https://. HTTP is not supported. Accept the browser warning for the self-signed certificate.
Step 3 - Get passwords from Secrets Manager
Passwords are never printed in CloudFormation Outputs. Retrieve them from AWS® Secrets Manager.
Open the secret
- On the
RoadrunnerSMB-EvalOutputs tab, clickEvalCredentialsConsoleUrl
(or open Secrets Manager and search foreval-dc-passwords). - Choose Retrieve secret value. The secret is JSON.
JSON fields you need
| Field | Account | Used for |
|---|---|---|
EvalAdminPassword |
Domain user eval-admin (Domain Admin) |
Day-to-day Admin UI login and SMB as a privileged AD user |
EvalUserPassword |
Domain user eval-user (regular user) |
Non-admin SMB / ACL tests - not for Admin UI day-to-day |
ApplianceOwnerPassword |
Local rrsmb-admin (Appliance Owner) |
Break-glass Admin UI when AD is unreachable - cannot access SMB shares |
DSRMPassword |
Windows® Directory Services Restore Mode | DC recovery only - not used for Roadrunner Admin UI or SMB |
After headless First-Time Setup finishes,
ApplianceOwnerPasswordis written into the same secret as the AD passwords. If that field is missing, wait a minute and retrieve the secret again, or confirm the stack has reachedCREATE_COMPLETE.
Step 4 - Log in as eval-admin
Open
AdminUIUrlfrom the parent stack Outputs.Username - use one of these (all accepted):
eval-admin(simple)ACME\eval-admin(NetBIOS - matchesEvalAdminLogin)eval-admin@corp.acme.com(UPN)
Password - paste
EvalAdminPasswordfrom Secrets Manager (copy/paste exactly; do not type it by hand if you can avoid it).Sign in. You should see the Dashboard.
Do not combine formats.
ACME\eval-admin@corp.acme.comis rejected. With aDOMAIN\prefix, use the short account name, not the UPN.
Other accounts (same secret)
| Login | Password field | Notes |
|---|---|---|
eval-admin |
EvalAdminPassword |
Domain Admin - primary Eval Kit operator account |
eval-user |
EvalUserPassword |
Regular AD user for share permission tests |
rrsmb-admin |
ApplianceOwnerPassword |
Local Appliance Owner (break-glass Admin UI only) |
Full identity model: Identity and permissions.
Step 5 - Create a share and mount (same as standard Quick Start)
From here the product workflow matches the standard guide:
- Shares → Create Share → name the share → set permissions → Create (wait 15-60 seconds).
- On a Windows client that can reach the NLB, mount:
\\<NlbDnsName>\<sharename>
Use NlbDnsName from the RoadrunnerSMB-Eval Outputs tab. Sign in with an AD account that has share access (for example eval-admin or eval-user and the matching password from the secret).
Detailed steps: Quick Start - Create your first share · Quick Start - Mount from Windows
What's next
- Quick Start Guide - shares, mount, verify, and common first-time issues (same product after login)
- Admin Guide - day-to-day administration, cluster health, updates
- Identity and permissions - Deployer vs Appliance Owner vs AD Administrator
- Known Limitations - before you plan a production cutover
- Deployment Guide - production Single-AZ / Dual-AZ architecture (bring your own VPC and AD)
- Release Notes - what is new in this version
Common Eval Kit issues
| Symptom | Likely cause | Fix |
|---|---|---|
| Admin UI won't load | Stack still converging, or AdminAccessCidr excludes your IP |
Wait for parent CREATE_COMPLETE; confirm your public IP is allowed; use parent Outputs AdminUIUrl |
| Can't find passwords | Looking at Outputs instead of Secrets Manager | Use EvalCredentialsConsoleUrl → Retrieve secret value |
Login failed for eval-admin |
Wrong password field, or mixed username format | Paste EvalAdminPassword; use one username format only |
ApplianceOwnerPassword missing |
Headless FTS still finishing | Wait until CREATE_COMPLETE, retrieve the secret again |
| Can't mount share | No share yet, or NLB not healthy | Create a share in Admin UI; wait ~2 minutes; check Cluster |
| Reinstall in same Region fails with CloudFormation name-conflict on a log group | Straggler Eval Kit log groups left after uninstall | Delete /rrsmb/eval/<region>/cfn-lambda and /rrsmb/eval/<region>/lambda if present, then relaunch. See Release Notes - Errata |
More help: Support & Troubleshooting.
