Onboarding resources
Public server: tak.xsd.us:8443:ssl (streaming), 8446 (ATAK enrollment), 8444 (TAK Aware Marti on cellular). Extended wiki and file repo: TAK wiki · TAK files.
Wiki & file repository
Hosted on the XSD file system at nextcloud.xsd.us. Wiki and files use the same sign-in as the user gateway — not the portal break-glass admin account. Use your operator email (e.g. the same address as your managed TAK user if you are in nc_portal_ops).
| Surface | Audience | Link |
|---|---|---|
| User wiki | Gateway users | TAK Users wiki |
| Admin wiki | Portal operators | TAK Administration wiki |
| File repo | Role-based (TAK/ tree) | File system → TAK |
| Announcements | Group-targeted news | Announcement center |
Connection reference
| Profile | Host | Port | NetBird? | When |
|---|---|---|---|---|
| External | tak.xsd.us | 8443 | No | Cellular, remote, anywhere |
| Internal | 192.168.20.206 | 8089 | Optional | Home LAN only |
| Legacy public | tak.xsd.us | 8089 | No | Fails off homelab LAN |
Account roles & access tiers
The dashboard Accounts & roles card shows icon flags per identity; this section is the full reference.
| Role | What it controls | Where |
|---|---|---|
| Portal operator | Create users, agencies, signups, Reset 2FA | admin.tak.xsd.us — admins table |
| TAK admin | Metrics Dashboard :8443 (ROLE_ADMIN) | UserManager; browser access needs client certificate |
| Agency admin | Scoped signup approval on admin portal (grant/revoke via operator kebab menu) | agency_admins table |
| Gateway user | xsd.us / takuser.xsd.us dashboard | tak_users.password_hash; 2FA when enrolled |
| CloudTAK admin | Map UI admin (system_admin) | CloudTAK PostGIS profile — not cloudtak-admin service account |
| TAK-only | Legacy / infrastructure UserManager account | Not portal-managed — Metrics Dashboard |
Admin — onboard a new user
- Sign in at this portal.
- Create TAK user (username, group, note). Optionally send onboarding email.
- Copy the one-time password immediately.
- Show the user the onboarding QR (after create) or use QR under Accounts & roles.
- Set the client toggle to ATAK or iTAK for the primary QR type.
- Send credentials + package instructions, or use Email on the user row.
- Confirm online status under Accounts & roles after they connect.
Event / bulk onboarding
Use dashboard Event / bulk onboarding generic QRs when many users are pre-created in the same group. Each person enters their own assigned credentials after scan.
End user guides
WinTAK
Data package (recommended)
- Install WinTAK → import enrollment zip → enter username/password.
Manual setup
- Host
tak.xsd.us, port8443, SSL, enroll + auth, install CA from package.
iTAK
- Scan admin iTAK QR → save zip to Servers folder → toggle server on.
- Or download
TAK-<username>-enroll-itak.zipand upload via Gear → Network → Servers.
TAK Aware (iOS)
Use iTAK soft-cert zip. After import, set Secure API Port to 8444 (Advanced) or Channels spin on cellular.
- Camera → save zip → Open in → TAK Aware.
- ≡ → Settings → Certificate Enrollment → Advanced → Secure API Port
8444.
ATAK (Android)
- Set callsign in Settings before import.
- Import Manager → Local SD → select zip → enter username/password.
- Enable server (green circle). Cellular test: WiFi off, NetBird off.
CloudTAK map (browser)
map.tak.xsd.us — same password as portal Reset PW.
Basemap stuck? Console: indexedDB.deleteDatabase('CloudTAK'); location.reload();
Troubleshooting
| Symptom | Fix |
|---|---|
| Enrollment OK, streaming SSL failure | ATAK omits SNI on :8443 — VPS needs TCP fallback (AGENTS.md). |
| Fails on cellular | Use tak.xsd.us:8443, not 8089 or LAN IP |
| Wrong password | Admin Reset PW in portal; re-send package |
| CloudTAK basemap toggle error | Clear IndexedDB CloudTAK on map site; portal Reset PW runs server fix |
| CloudTAK channel modal loop | Hard refresh; see cloudtak/deploy/DEPLOY.md |