# #024 QR Server-local display v1.0.295

Reason for v294 failure: public pcsr.net page offered QR creation based on hostname and required a manually supplied admin key; installer only copied the sync API, and generated the key only when the separate server launcher ran. The domain alone cannot confer administrator rights.

Fix: public browser screen presents scanner/redeem only. Server operator runs `show-device-qr.ps1` locally as the same Windows account as `start-server-example.ps1`; this PowerShell tool decrypts the DPAPI-protected admin key, issues a POST directly to the loopback API to get a short-lived 120s one-time QR, writes an ephemeral HTML to a NONPUBLIC folder and opens it on the server. No raw key is printed, embedded in HTML or sent to the public browser. Existing API auth, device-ID registry, SQLite merge and conflict handling unchanged. One package and one installer; server role deploys both scripts.

Remaining: API service start and HTTPS reverse proxy still require a server operator. Windows and smartphone actual network tests NOT RUN, NOT COMPLETED.