
- AWSAvailable on Amazon Web Services
- Azure· nextMicrosoft Azure is next on the roadmap
- GCP· nextGoogle Cloud is next on the roadmap
SuiteCRM Customer Relationship Management
SuiteCRM 8.10.2 - the latest stable release from the official SuiteCRM-Core archive - on Apache, PHP 8.3 and MySQL 8.0 with phpMyAdmin and Webmin. The setup wizard is pre-completed so you land on the dashboard, the site URL follows your public IP, and the Symfony secret and database credentials are regenerated per instance.
- Version
- v8.10.2
- Operating system
- Ubuntu 24.04 LTS
- Architecture
- x86_64
- Support
- Community
What's installed
Every package and version on the image. Nothing else is installed.
- SuiteCRM 8.10.2
- Apache 2.4.58
- PHP 8.3.33
- MySQL 8.0.46
- phpMyAdmin 5.2.3
- Webmin 2.660
Licensing — Open source (AGPL-3.0), no licence key required
Deploy anywhere
SuiteCRM Customer Relationship Management on AWS.
Microsoft Azure and Google Cloud are next on the roadmap. One clean-room build, one first-boot credential model, one patch cadence — identical on every cloud you run. Every identifier below is the real one; copy it and launch.
- AWSAvailable
Amazon Web Services
AMI · v8.10.2
AWS AMI ID
ami-04415d59af0f5d0cd- Released
- September 13, 2026
- Root volume
- gp3 · 16 GiB
Instance types
- t3a.medium
- t3.medium
- t3a.large
- m6a.large
Regions
- us-east-1
Getting started
From launch to signed in, step by step.
Launch in us-east-1 with TCP
22,80and8000open; wait two to three minutes.Open
http://<instance-public-ip>/index.phpand sign in with usernameadminand your EC2 Instance ID as the password, all lowercase (for examplei-0123456789abcdef0).phpMyAdmin:
/phpmyadmin(usernameroot). Webmin: port8000(usernameadmin). Same password.SSH as
ubuntuwith your key pair. Change passwords withsudo bash /home/ubuntu/iscripts/pass_suitecrm.sh,pass_mysql.shorpass_webmin.sh(12+ characters).The scheduler runs every minute from cron. Set your own domain as the site URL and the IP sync leaves it alone; add a certificate when you have one.
Security posture
What this image does and does not ship with, one fact per line.
Clean-room build on Canonical's official Ubuntu 24.04 LTS image: every component comes from its own official repository or release, nothing is copied from any third-party image, and the finished image was scanned for third-party vendor strings before capture.
No usable credential ships in the image; passwords are set on your instance at first boot from EC2 instance metadata (IMDSv2) and the scripts that set them delete themselves afterwards.
SSH is key-only, root login over SSH is refused, and build-time SSH keys, shell history and logs were removed before imaging.
Nothing sensitive is shared between customer instances: the Symfony APP_SECRET, the SuiteCRM database user's password and the phpMyAdmin cookie key are all regenerated on first boot alongside the three Instance-ID passwords.
SuiteCRM's internal directories (bin, cache, config, core, extensions, logs, tmp, vendor) are denied over HTTP and Apache's DocumentRoot is the public directory only.
SuiteCRM connects as its own database user, so changing the MySQL root password never takes the CRM down.
A branding scan across Apache, Webmin, MOTD and application configuration found no third-party strings.
The image is HTTP-only by design so it works at a bare IP with no certificate warnings: terminate TLS at a load balancer or add a certificate before exposing it publicly, and restrict port 22 and any admin ports to trusted IP ranges in your security group.