Connect & Register the Edge Appliance

This guide covers on-site work: mounting and cabling the appliance, opening SSH, creating a registration key in the cloud, and registering the device with edgezu-tui.

Tip

Read Edge Appliance Overview first for what the device does. Confirm Network & Connectivity with your network team before first boot.

Before you start

Item	Details
Cloud access	Tenant admin account with settings.edge_registration_keys.manage (or Admin)
Account name	Your organization slug (same value you enter at login — e.g. acme-industries)
Ingest URL	https://ingest.cloud.monozu.io unless Monozu gave you a dedicated ingest host
Credentials	SSH username/password or key provided with the appliance by Monozu
Registration key	Created in the cloud (steps below) — shown once when created

1. Connect and power on the appliance

1. Mount the appliance in your rack or panel per Monozu delivery documentation.

2. Connect power and wait for boot (typically a few minutes on first start).

3. Connect network cables:

   • WAN / uplink interface — outbound path to the internet or corporate egress (for cloud and VPN).
   • LAN interface(s) — OT/IT VLAN you want to discover or protect (one appliance per isolated segment is typical).

4. Ensure outbound access from the WAN path to cloud.monozu.io, ingest.cloud.monozu.io, and your VPN Hub hostname (Network & Connectivity).

Caution

Do not expose the appliance with inbound ports from the internet. All cloud connectivity is initiated from the device outward.

2. Access the device (SSH or local console)

You can use either a local monitor and keyboard (console) or SSH from a jump host on a management network.

SSH from your workstation or jump host

1. Obtain the appliance IP address (DHCP reservation, label on device, or temporary display on console if available).

2. Connect with SSH using credentials from your Monozu delivery packet, for example:

   ssh <username>@<appliance-ip>

   Replace <username> and <appliance-ip> with values supplied for your deployment.

3. If SSH fails, verify you are on the correct management VLAN, that the host is powered on, and that local firewall rules allow SSH to the appliance on your site (this is internal to your network, not inbound from the internet).

Local console

If you have physical access, attach a display and keyboard. On first boot the appliance starts the edgezu-tui setup wizard automatically (same flow as launching the TUI from SSH).

3. Create a registration key in Monozu Cloud

Perform this before or during on-site registration while you can copy the key securely.

1. Sign in to https://cloud.monozu.io as a tenant administrator.

2. Open Settings → Edge registration keys (/settings/edge-registration-keys).

3. Click New key. Enter a name (e.g. Factory Warsaw — Line 1), optional max uses, and optional expiry.

4. Click Create and copy the registration key immediately — it is not shown again.

5. Keep the key available on-site (password manager or secure handoff to the engineer running the TUI). See Edge Registration Keys for revoke and audit details.

4. Register with edgezu-tui

The edgezu-tui application runs on the appliance and links it to your tenant.

1. On the appliance (SSH session or local console), start the setup UI if it is not already running:

   edgezu-tui

   On first boot, the wizard may start automatically.

2. In the TUI, complete network setup if prompted (WAN/LAN interfaces, DHCP or static IP as required for your site).

3. On the registration screen, enter:

   • Account name — your tenant slug (organization slug), e.g. acme-industries
   • Ingest server / cloud server — https://ingest.cloud.monozu.io (unless Monozu specified another URL)
   • Registration key — the key you copied from Settings → Edge registration keys

4. Submit registration. On success the TUI shows confirmation and the appliance stores its device identity for ongoing cloud communication.

5. In Monozu Cloud, open Settings → Edge devices (or the devices list in Settings) and confirm the new device appears with status Connected.

6. Enable optional modules in the TUI if your license includes VPN, backup, or security — module names must match your License settings.

Note

If registration fails with an authentication error, verify the account name slug, that the key is not expired or revoked, and that outbound HTTPS to ingest is allowed. Create a new key if the previous one was lost before use.

5. After registration

Task	Where
Verify discovery	Assets / CMDB — new hosts after scan (Asset Discovery)
Assign site / zones	Assets — link discovered assets to the correct site and zones
VPN / backup / security	Cloud UI modules + TUI module enablement per license
Revoke install key	Settings → Edge registration keys — revoke after rollout

Troubleshooting

Problem	What to try
Cannot SSH to appliance	Check IP, cable, VLAN, local ACLs; use console if available
edgezu-tui not found	Contact Monozu support — appliance image may need recovery
Registration unauthorized	Wrong account slug, wrong/expired key, or clock skew; check ingest URL
Device not Connected in cloud	Firewall/proxy blocking outbound HTTPS; see Network & Connectivity
Discovery empty	LAN cable on correct interface; module enabled; wait for scan interval

See also

• Edge Appliance Overview
• Edge Registration Keys
• Architecture Overview
• Asset Discovery