Restart / Shutdown QR Requirement on Local Network

[bl1nkr1]

Observation

Restart and Shutdown currently require scanning a QR code, even when accessing the device from the local network.

While this may be intentional for security, it adds friction for routine actions.

Discussion

Would it make sense to:

• Skip QR confirmation when the user is authenticated and on the same local network?
• Make this behavior configurable in Settings?
• Limit QR enforcement to remote access scenarios?

Curious whether this is a deliberate security boundary or if there is room to balance convenience and protection.

[pengpeng]

@bl1nkr1

Thank you for the suggestion.

Shutdown and restart are considered highly sensitive operations. They require private key authorization, and the private key is securely stored within LarePass.

Our assumption is that most users will perform shutdown operations through LarePass:
https://docs.olares.com/manual/larepass/manage-olares.html#restart-or-shut-down-olares-remotely

In last year’s version, shutdown could only be performed within the local network. After introducing private key authorization, we enabled administrators to perform shutdown and restart operations even outside the local network.