App Devices
App Devices are VPN client device registrations — the smartphones, laptops, and desktops that connect to your network through the SecureLink VPN. Each device is registered with the orchestrator and assigned to an edge for VPN connectivity.
Navigate to Equipment > Devices in the sidebar.
How Devices Are Registered
Devices register with the orchestrator in one of two ways:
-
VPN Client App — The SecureLinkVPN app automatically registers the device during setup. The app generates a device fingerprint, authenticates via SSO, and receives its VPN configuration.
-
Manual Registration — Navigate to
/app-devices/registerto manually register a device. You provide the device name, WireGuard public key, and platform. After registration, a WireGuard configuration file is generated that can be imported into any WireGuard client.
Devices Page
Info Banner
The top of the page shows a banner with your tenant configuration:
- Tenant Code — Your organization's tenant identifier
- Protocol — The VPN protocol configured for your tenant (WireGuard or IKEv2)
Stat Cards
| Card | Description |
|---|---|
| Total Devices | Total number of registered devices |
| Active | Devices with active status |
| Connected | Devices currently connected to an edge |
| Suspended | Devices that have been suspended |
Table Columns
| Column | Description |
|---|---|
| Device Name | Name and platform icon (color-coded by OS) |
| Platform | Operating system (iOS, Android, Windows, macOS, Linux) |
| Status | Online, Disconnect (suspended), or Offline (inactive) |
| VPN IP | Assigned tunnel IP address, or "Not connected" |
| Protocol | WireGuard or IKEv2 |
| Connected To | Edge name with activity indicator, or "Not connected" |
| Data Transfer | Download and upload totals |
| Last Seen | Most recent activity timestamp |
| Group | Device group assignment (Assigned or Unassigned) |
Click any device row to open its detail page.
Actions
- Invite VPN Users — Send VPN setup invitations to users via email
- Refresh — Reload the device list
Device Detail
The device detail page shows comprehensive information about a single device.
Status Cards
Four cards at the top show: Status, Platform + OS Version, App Version, and Last Seen.
Device Information
| Field | Description |
|---|---|
| Device ID | Unique identifier |
| Owner | The user who registered the device (name and email) |
| Fingerprint | Unique device fingerprint |
| Device Group | Current group assignment with a Change link to reassign |
| Tunnel Protocol | WireGuard or IKEv2 |
| Tenant Code | Organization identifier |
| Created / Updated | Registration and modification timestamps |
Routing Policies
Displays globally-enabled routing policies that apply to this device. If the device is assigned to a device group, group-level routing policies are also shown.
Active Connection
When the device is currently connected, this section shows:
- VPN IP Address — Assigned tunnel IP
- Connected Edge — Which edge the device is connected to
- Allowed IPs — Subnets accessible through the tunnel
- Connected Since — Connection start time
- Downloaded / Uploaded — Data transfer counters
- Last Handshake — Most recent WireGuard handshake time
VPN Peers
Lists all peer entries for this device. A device may have peers on multiple edges if it has been reassigned.
| Column | Description |
|---|---|
| Peer ID | Peer identifier |
| Edge | The edge this peer is configured on |
| VPN IP | Assigned IP for this peer |
| Status | Online or Offline |
| Connected / Disconnected | Connection state timestamps |
| Data Transfer | Per-peer transfer counters |
Connection History
A chronological log of connection and disconnection events:
| Column | Description |
|---|---|
| Event | Connected (green) or Disconnected (red) |
| Time | When the event occurred |
| VPN IP | IP address used during the connection |
| Endpoint | Source IP and port of the client |
| Data Transfer | Bytes transferred during the session |
| Reason | Disconnect reason (if applicable) |
Actions
- Edit — Update the device name
- Change Group — Assign or reassign the device to a device group
- Delete Device — Permanently remove the device and all its VPN peers
Deleting a device removes all its connection peers. The device will need to re-register to reconnect.
Manual Device Registration
Navigate to Devices > Register or click the registration link. The registration form requires:
| Field | Required | Description |
|---|---|---|
| Device Name | Yes | A friendly name for the device |
| WireGuard Public Key | Yes | 44-character base64 public key (generate with wg genkey | tee privatekey | wg pubkey > publickey) |
| Platform | Yes | iOS, Android, Windows, macOS, or Linux |
| OS Version | No | Operating system version |
| App Version | No | VPN client version |
After registration, you receive a WireGuard configuration file containing the [Interface] and [Peer] sections. Import this into your WireGuard client to connect.
The private key is not stored by the server. You must add your private key to the generated configuration file before importing it.