Machines, phones & services

The hub controls admission, while each phone or desktop pairs independently with every bridge it is allowed to operate.

Make this machine controllable

Open Set up → This machine. C3 Desktop checks for Herdr, c3bridge, and a local hub bundle, then asks for a display name and stable host ID.

When you enroll, the setup engine:

1. Mints a bridge enrollment bundle from the hub.
2. Imports it into c3bridge.
3. destroys the temporary bundle after import.
4. Runs c3bridge doctor.
5. Installs the bridge background service when selected.

If import fails after an identity was minted, the engine attempts to revoke that identity so a retry does not leave an active orphan.

Enroll a phone

Open Set up → Phones, name the phone, and mint an enrollment QR. The QR is short-lived and secret while visible. Scan it from C3 Mobile, then pair that phone with each bridge using the one-time code produced by c3bridge pair.

Enroll this desktop as a client

Open Operate → Signal. If the hub is local, choose Use local hub; otherwise paste an enrollment code created by the hub. Then paste the one-time bridge pairing code for every machine this desktop should control.

Manage trust and services

• System → Devices lists phones and bridges in the local hub registry and supports explicit revocation.
• System → Settings shows the hub bundle, certificate-pin state, hub and bridge services, Herdr state, local secret storage, and live control connections.
• Revocation changes hub administration keys. Take a fresh sealed administration backup after a device is revoked.

Removing the local enrollment from Settings is not the same as revoking it at the hub. Revoke first when access must end immediately.