Enroll a device

Enrollment takes one command on the device. It works on a clean Raspberry Pi (or any supported Linux/arch combination) with no prior setup. If this is your first device, the Quickstart walks through the whole flow end to end.

1. Create an enrollment token

From the dashboard, go to Devices → Enroll device and generate a token. The token is shown to you exactly once, is single-use, and expires 15 minutes after creation. If it expires before you use it, generate a new one.

2. Run the install command on the device

Copy the generated command and run it on the target device:

curl -fsSL "https://app.tunnelero.com/install.sh" \
  | sudo TUNNELERO_AGENT_ENROLL_TOKEN="<token>" TUNNELERO_AGENT_SERVER_URL="https://app.tunnelero.com" sh -s -- --download-base "https://app.tunnelero.com"

The installer:

• Detects the device architecture (arm64, armv7, or amd64).
• Downloads and verifies the agent binary for that architecture.
• Installs and starts the agent as a systemd unit.

3. Confirm the device is online

Back in the dashboard, the device appears in your device list. Status moves from registered to online once the agent completes its first heartbeat over its persistent connection to the server. If it stays registered, check that the device has outbound network access and that the token had not already expired when you ran the command.

One device per account on the Trial

New accounts start on the Trial, which allows one enrolled device with no time limit. To enroll more devices, subscribe to a paid plan from /dashboard/billing. See Billing & plans for details.