2018-10-24 14:24:29 +00:00
---
2020-09-01 15:14:13 +00:00
layout: commands
2020-04-07 18:55:19 +00:00
page_title: 'Commands: ACL Bootstrap'
2023-01-26 18:42:13 +00:00
description: >-
The `consul acl bootstrap` command generates a new token with unlimited privileges to use for management purposes and outputs the token's details.
2018-10-24 14:24:29 +00:00
---
# Consul ACL Bootstrap
Command: `consul acl bootstrap`
2023-01-25 16:52:43 +00:00
Corresponding HTTP API Endpoint: [\[PUT\] /v1/acl/bootstrap](/consul/api-docs/acl#bootstrap-acls)
2022-01-10 17:40:11 +00:00
2023-01-04 20:19:33 +00:00
The `acl bootstrap` command generates a new token with unlimited privileges to use
for management purposes and outputs the token's details. Optionally, you can provide a Secret ID to use instead of generating a completely new token. You can create this bootstrapping token only once and afterwards bootstrapping
2018-10-24 14:24:29 +00:00
will be disabled. If all tokens are lost and you need to bootstrap again you can follow the bootstrap
2022-09-14 22:45:42 +00:00
[reset procedure](https://learn.hashicorp.com/consul/security-networking/acl-troubleshooting?utm_source=docs).
2018-10-24 14:24:29 +00:00
2023-01-25 16:52:43 +00:00
The table below shows this command's [required ACLs](/consul/api-docs/api-structure#authentication). Configuration of
[blocking queries](/consul/api-docs/features/blocking) and [agent caching](/consul/api-docs/features/caching)
2022-01-10 21:44:56 +00:00
are not supported from commands, but may be from the corresponding HTTP endpoint.
| ACL Required |
| ------------ |
| `none` |
2018-10-24 14:24:29 +00:00
## Usage
2023-01-04 20:19:33 +00:00
Usage: `consul acl bootstrap [options] [FILE]`
If a file is supplied (or `-` for standard input), the new token's Secret ID is read from the file.
Otherwise, Consul creates a new one.
2018-10-24 14:24:29 +00:00
2020-03-26 16:03:22 +00:00
#### Command Options
2020-04-07 18:55:19 +00:00
- `-format={pretty|json}` - Command output format. The default value is `pretty`.
2020-03-26 16:03:22 +00:00
2018-10-24 14:24:29 +00:00
The output looks like this:
```text
AccessorID: 4d123dff-f460-73c3-02c4-8dd64d136e01
SecretID: 86cddfb9-2760-d947-358d-a2811156bf31
Description: Bootstrap Token (Global Management)
Local: false
Create Time: 2018-10-22 11:27:04.479026 -0400 EDT
Policies:
00000000-0000-0000-0000-000000000001 - global-management
```
2022-07-27 06:17:11 +00:00
#### API Options
@include 'http_api_options_client.mdx'
@include 'http_api_options_server.mdx'
