Skip to Content
IoT Device ManagementConnect Devices

Connect Devices

IronFlock supports multiple ways to connect devices, depending on the hardware and operating system. No hardware at hand? You can simulate a device on your laptop in minutes.

Prerequisites

Before connecting a device, make sure you have:

  1. A project created on IronFlock
  2. A device entry created within that project (click NEW DEVICE in the project Settings -> Devices panel.)
  3. The downloaded device configuration file (.flock)

Device on a restricted corporate network? Plan the network setup before installing — it is the most common reason a freshly installed device stays offline:

  • Corporate HTTP proxy: the agent and Docker must be told about it explicitly — see Behind a Corporate Proxy → Edge Devices.
  • Connecting to an on-premises Appliance: the device must reach the appliance’s service ports directly — or, when the appliance runs HTTPS with your corporate certificate, only port 443, with your corporate root CA trusted on the device. See Device Connectivity in the Appliance guide.
  • Clock drift: corporate firewalls usually block the public time servers a fresh operating system ships with, so the device clock silently drifts — configure your internal NTP server. See Time Synchronization (NTP).

Test First: Simulate a Device on Your Laptop

You don’t need physical hardware to explore IronFlock. The FlockFlasher app can run the IronFlock agent directly on your laptop, so your laptop impersonates a real device within your project — perfect for testing apps and dashboards before rolling out to actual hardware.

  1. Install Docker Desktop (or Docker Engine on Linux) and make sure it is running.
  2. Download and install the FlockFlasher app for your OS.
  3. Double-click the downloaded .flock file of your device — it opens in FlockFlasher and the device appears in the list. (Alternatively, open FlockFlasher and add the file via the + button.)
  4. Click Test Device (▶) on the device entry. FlockFlasher automatically downloads the IronFlock agent on first use and starts it with your device configuration.

Your laptop now acts as this device within your IronFlock project: it appears online, and you can install and run apps on it exactly as on a real device. The apps run as Docker containers on your laptop.

When you are done, stop the test in FlockFlasher. You can later use the same .flock file to provision the real device — just make sure only one machine runs a given device configuration at a time.

Method 1: Flash an SD Card

Best for Raspberry Pi and other ARM devices that boot from SD cards.

  1. Download the FlockFlasher app for your OS.
  2. Insert an SD card (16 GB minimum) into your computer.
  3. Open FlockFlasher and click the + button to load the .flock file.
  4. Select the SD card drive (FlockFlasher auto-detects external drives).
  5. Choose the correct image for your device (Raspberry Pi 3/4, Zero, etc.).
  6. Optionally configure WiFi so the device can connect at its destination.
  7. Click Flash and wait for writing, validation, and configuration to complete.
  8. Insert the SD card into the device and power it on.

The device should come online within 20 minutes.

Warning: The flashing process erases all data on the selected drive. FlockFlasher hides internal drives by default, but always double-check your selection.

Method 2: USB Installer for Industrial PCs

For AMD64 devices with EFI boot (e.g., Siemens SIMATIC Box IPC).

  1. Insert a USB stick (16 GB minimum) and open FlockFlasher.
  2. Load the .flock file and select the USB drive.
  3. Select the Industrial PC x86_64 (EFI) image.
  4. Click Flash and wait for completion.
  5. If necessary, change the boot order in the device’s BIOS to boot from USB.
  6. Insert the USB stick and power on the device.

The device should come online within 60 minutes.

Method 3: Custom Installation

For devices keeping their existing Linux OS. Ideal for NVIDIA Jetson and custom hardware.

Note: This manual installation method is intended for real production hardware such as industrial PCs, gateways, and embedded devices — not for laptops. If you just want to try IronFlock on your laptop, follow Test First: Simulate a Device on Your Laptop instead — no manual agent installation required.

Linux / Unix Devices

  1. SSH into the device.
  2. Download the setup binary: 
    curl -sSL https://instance-registry.ironflock.com/dl/reswarmify/install.sh | bash

    On an IronFlock appliance? Use the commands shown in the New Device dialog — they point at the appliance instead of instance-registry.ironflock.com.

  3. Copy the .flock file from your computer to the device: 
    scp mydevice.flock user@device-ip:/home/user/
  4. Run the agent: 
    sudo ./ironflock-init -c mydevice.flock

Behind a corporate proxy? Export your proxy before step 2 so the downloads succeed, and pass --http-proxy / --https-proxy to ironflock-init in step 4 so it configures the Docker engine for you. See Behind a Corporate Proxy for the full command and the corporate-CA steps.

Windows Devices

  1. Install Docker Desktop on the device and enable Start Docker Desktop when you sign in in the Docker Desktop settings. For unattended devices, also configure Windows automatic sign-in so Docker is available after a reboot without anyone logging in.
  2. Download reagent.exe.
  3. Copy the .flock file to the device.
  4. Install and start the agent as a Windows service from an elevated (Administrator) prompt: 
    reagent.exe service install -config path\to\config.flock
    The service starts immediately and again at every boot, restarts automatically on failure, and keeps the agent up to date. Add -noStart to install without starting it, and check on it any time with reagent.exe service status.

Behind a corporate proxy? Add -proxy http://proxy.example.com:3128 to the service install command, and set Docker Desktop’s proxy under Settings → Resources → Proxies. See Behind a Corporate Proxy for details and the corporate-CA steps.

Time Synchronization (NTP)

The device agent needs an accurate clock. The TLS handshake with the platform, the tokens that authorize image pulls and the timestamp on every data point the device publishes all depend on it. A device whose clock is more than 15 minutes out of step is also rejected by file storage with CLOCK_SKEW.

In a corporate network this is a setup step, not a given: outbound NTP on UDP port 123 is commonly blocked, so the public time servers the operating system ships with are unreachable and the clock drifts without any visible error. Ask your IT department for the internal time server and configure it on the device, or have them allow outbound UDP 123 for the device network.

Linux

With systemd-timesyncd (the default on Debian and Ubuntu):

sudo mkdir -p /etc/systemd/timesyncd.conf.d
sudo tee /etc/systemd/timesyncd.conf.d/corporate.conf > /dev/null <<'EOF'
[Time]
NTP=ntp.your-company.com
EOF
sudo systemctl restart systemd-timesyncd
timedatectl status

With chrony:

echo "server ntp.your-company.com iburst" | sudo tee -a /etc/chrony/chrony.conf
sudo systemctl restart chrony
chronyc sources

timedatectl status must report System clock synchronized: yes.

Windows

From an elevated (Administrator) prompt:

w32tm /config /manualpeerlist:"ntp.your-company.com" /syncfromflags:manual /update
w32tm /resync
w32tm /query /status

Devices flashed with a ready-made IronFlock image (Methods 1 and 2) synchronize from public time servers by default. On a network that blocks them, either allow outbound UDP 123 for the device subnet, or configure the internal time server over SSH after the first boot, exactly as shown for Linux above.

Verifying the Connection

After connecting, check the device status in your project:

  • Green indicator — Device is online and communicating with IronFlock.
  • Red indicator — Device is offline. Check the network connection and ensure the agent is running.

The device map view shows the geographic location of all devices in the project.

Last updated on
OverviewFlockFlasher App