Self-Provisioning a Roving Edge Device

Prerequisites

The following tasks must be completed before you can self-provision the device:

Prepare to Self-Provision the Device

1. Sign in to your OCI tenancy where the Compute Cloud@Customer infrastructure resource was created for the new Roving Edge device, and save the following information so you can retrieve it later:

   • Tenancy OCID – To find your OCI tenancy OCID, sign in to the OCI Console, select the navigation menu (hamburger icon), and go to Governance & Administration > Tenancy Details. Copy the OCID for the OCI tenancy associated with this device.

   • While signed in to the tenancy, in the navigation menu, select Hybrid & Multicloud, then select Oracle Compute Cloud@Customer. Select the infrastructure that was created for this device. Select the OCID copy button.

2. Establish a temporary OCI CLI session in the terminal emulator on your controlling host:

   For more information, see Token-based Authentication for the CLI.

   Note
   
   

   The session expires after 24 hours. If self-provisioning takes longer than that, you must establish a new session.

   1. Generate a session token by creating a temporary session that's used to authenticate with OCI during self-provisioning:

      oci session authenticate

   2. Display the configuration file that was created for the temporary session.

      You refer to this output in a subsequent task. Example:

      $ cat ~/.oci/config
      [profile]
      fingerprint = 1a:2b:3c:4d:5e:6f:7g:8h:9i:0k:e7:07:fa:b0:34:56
      key_file = /Users/user1/.oci/sessions/profile/oci_api_key.pem
      tenancy = ocid1.tenancy.oc1..unique-id
      region = us-phoenix-1
      security_token_file = /Users/user1/.oci/sessions/profile/token

   3. Display the contents of the directory where the security token file is stored according to the OCI CLI configuration file.

      You need tokens and keys in a subsequent task. Example:

      $ ls ~/.oci/sessions/<my-profile>
      oci_api_key_public.pem	oci_api_key.pem		token

Start the Self-Provisioning Process

The following menu is displayed when the device is initially powered on and boots up for the first time (see Power On the Device):

Roving Edge Basic Configuration Interface (ver. 2.0.58)
Number selects a menu item, Enter accepts the selection, Ctrl+Z refreshes the
menu, Ctrl+C returns to main menu, Backspace deletes a character.

1) Select Platform
2) Advanced Operations

Select option (1-2):

When working with the serial console menus, enter the menu number for the menu option.

1. Enter the number for Select Platform.

   Example:

   Select option (1-2): 1
   
   Roving Edge Basic Configuration Interface (ver. 2.0.58) / Select Platform
   Number selects a menu item, Enter accepts the selection, Ctrl+Z refreshes the
   menu, Ctrl+C returns to main menu, Backspace deletes a character.
   
   1) Roving Edge Classic
   2) OCI Edge Platform
   
   Select option (1-2):

2. Select OCI Edge Platform.

   The self-provisioning main menu is displayed.

   Roving Edge Basic Configuration Interface - OCI Edge Platform (ver. 2.0.58)
   Number selects a menu item, Enter accepts the selection, Ctrl+Z refreshes the
   menu, Ctrl+C returns to main menu, Backspace deletes a character.
   
   1) Configure Networking
   2) Set Up OCI Connectivity
   3) Set Up Credentials
   4) Advanced Operations
   
   Select option (1-4):

   Note
   
   

   The main menu displays the high-level list of operations. Each operation has submenus. You can press Ctrl+C to return to the main menu from a submenu. If want to cancel or go back from the current operation or the process stalls and becomes unresponsive, use Ctrl+Z to refresh the screen. Certain operations prevent the use of Ctrl+C or Ctrl+Z while they're still in progress.

Configure Device Networking

This task configures the device network settings to enable access to the public network.

1. Select Configure Networking.

   The networking submenu is displayed.

   Roving Edge Basic Configuration Interface - OCI Edge Platform (ver. 2.0.58) / Configure Networking
   Number selects a menu item, Enter accepts the selection, Ctrl+Z refreshes the
   menu, Ctrl+C returns to main menu, Backspace deletes a character.
   
   1) IP Address:
   2) Gateway:
   3) DNS Servers: 206.223.27.1, 206.223.27.2
   4) NTP Servers:
   5) Proxy URL:
   6) Test Network Connectivity to OCI
   7) Check OCI Server Clock and Device Clock
   
   Select option (1-7):

2. Use the menu options to configure the device network parameters according to your network environment:

   • IP Address: Enter an IP address for the physical device using one of the these formats:

     A.B.C.D/P or A.B.C.D/M (P - prefix length or M - netmask). Example: 203.0.113.2/24

   • Gateway: Enter the gateway IP address. Example: 203.0.113.1

   • DNS Servers: Enter DNS servers IP addresses, as A.B.C.D, separated by comma. Example: 216.146.35.35,216.146.36.36

   • (Optional but strongly recommended) NTP Servers: Enter NTP server IP addresses separated by a comma. Example: 203.0.113.15,203.0.113.16,203.0.113.17

     Using NTP prevents the device clock from drifting, which would cause TLS issues.

   • (Optional) Proxy URL: If a proxy is required for internet access, enter the URL. Example: https://<hostname>:<port>. Only basic forward proxy is supported: manually configured host and port without authentication or advanced features.

3. Select Test Network Connectivity to OCI. The device makes an HTTP call to OCI to verify public network access and name resolution.

4. Select Check OCI Server Clock and Device Clock. The device fetches the OCI server clock and compares it with the device clock.

   Authentication fails if the client's clock is skewed more than 5 minutes from the server's clock. For more information, see Maximum Allowed Client Clock Skew. If the device clock is skewed more than 5 minutes from the server clock, reenter the NTP Servers to update and sync the time. Then run the clock check again.

Set Up Connectivity to OCI

This task registers the device with OCI. Registration validates the device and associates it with the corresponding infrastructure in your OCI tenancy.

Use the parameters you looked up and saved while preparing for self-provisioning. See Prerequisites and Prepare to Self-Provision the Device.

1. In the serial console, type Ctrl+C to return to the main menu.

2. Enter the number for Set Up OCI Connectivity.

   The Set Up OCI Connectivity submenu is displayed.

   Roving Edge Basic Configuration Interface - OCI Edge Platform (ver. 2.0.58) / Set Up OCI Connectivity
   Number selects a menu item, Enter accepts the selection, Ctrl+Z refreshes the
   menu, Ctrl+C returns to main menu, Backspace deletes a character.
   
   1) Region:
   2) Tenancy ID:
   3) Infra ID:
   4) Session Token:
   5) Session Private Key:
   6) Register Device to OCI
   7) Retry Obtaining Resource Principal
   
   Select option (1-7):

3. Use the menu options in succession to configure OCI connectivity:

   • Select Region: Enter the region that was listed in the config file output. Examples: us-ashburn-1, uk-london-1, us-phoenix-1

   • Select Tenancy ID: Enter the Tenancy ID in OCID Format. For example ocid1.tenancy.<REALM>..uniqueID

   • Select Infrastructure OCID: Enter the infrastructure OCID.

   • Select Session Token: This is the token generated for your temporary OCI CLI session during preparation. Enter the contents of the security_token_file that was listed in the config file output.

     Ensure you only select the session token output. Omit any surrounding symbols and characters.

     $ cat token && echo ""
     abcdefghijklmnopqrstuvwxyzeyJraWQiOiJhc[...]3dfaWFkXzhia04-YzxddQ12345677890

   • Select Session Private Key: Enter the contents of the key_file that's listed in the config file output.

     Only copy the lines starting with BEGIN PRIVATE KEY and ending with END PRIVATE KEY. Omit any other characters.

     $ cat oci_api_key.pem | sed '$d'
     -----BEGIN PRIVATE KEY-----
     MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQD7EqlbJj7l1DD0
     {...}
     QEuLAD1TE6M312345677890==
     -----END PRIVATE KEY-----
     $

     This file contains multiple entries. Therefore, after you paste the key, you must press Return twice to exit input mode.

   • Select Register Device to OCI.

     The device serial number is registered to the infrastructure resource in your OCI tenancy. A resource principal is obtained automatically.

     If the final step fails, try it again by running Retry Obtaining Resource Principal.

Download and Install Edge Platform Software

The device is shipped with a small installer OS. In this task, you download and install the complete Roving Edge software.

We recommend that you use a high-speed network for this task.

1. In the serial console, type Ctrl+C to return to the main menu.

2. Select Install Platform Image.

   The following menu is displayed:

   Roving Edge Basic Configuration Interface - OCI Edge Platform (ver. 2.0.58) / Install Platform Image
   Number selects a menu item, Enter accepts the selection, Ctrl+Z refreshes the
   menu, Ctrl+C returns to main menu, Backspace deletes a character.
   
   1) Download Installation Files
   2) Start Installation
   
   Select option (1-2):

3. Select Download Installation Files.

   Multiple ISO image files are downloaded. Wait for the download to complete.

4. At the end of the download, the ISO version is displayed. Press any key to proceed and begin the installation.

5. Select Start Installation.

   When the process is finished, a message is displayed to indicate installation is complete and the device will reboot.

6. After reboot, a GRUB menu appears with only one boot option: Edge OS with secure boot. If it does not start automatically, select it with the arrow keys and press Return. The boot process can take 10 minutes.

7. When the device completes the boot sequence, the OCI Edge Platform Serial Console Lock Screen is displayed.

   Set an initial passphrase for the serial console. If you need to manage this password in the future, see Changing the Serial Console Passphrase.

   Passphrase requirements:

   • Minimum Length: 8 characters

   • Maximum Length: 64 characters

   • Must Include the following characters:

     • One lowercase character
     • One uppercase character
     • One digit
     • One special char from this list:

       [ ] ! @ # % ^ & * ( ) _ = + " ` ~ $ - { } | \ ; < > . / ? ,

   Press Return to go back to the main screen.

8. Enter the passphrase to unlock the serial console.

   The OCI Edge Platform serial console menu is displayed.

      OCI Edge Platform
      ---------------------------
   1) Change Passphrase
   2) Check Network Configuration
   3) Show Status
   4) Show System Diagnostics
   5) Shutdown Device
   6) Reboot Device
   7) Advanced Menu
   8) Help
   9) Lock Screen
   
   Enter command number:

   All future access to the serial console requires the device unlock passphrase.

   If the installation fails, the interface displays a BASE64 encoded string which contains a compressed archive with the logs. For example:

   BASE64 encoded output for the logs archive follows:
   ============
   <BASE64_string>
   ============

   Copy and save the BASE64 output (text in between === lines) to a file. Then send the file to Oracle Support. See Self-Provisioning. You can also restart the installation.

9. Wait for the software installation background processes to complete. Check the status to confirm:

   1. In the OCI Edge Platform serial console menu select Advanced Menu, then select Install Management.

         Install Management
         -----------------------------
      1) Monitor Installation Progress
      2) Number of Log Lines

   2. In the Install Management menu, select Monitor Installation Progress.

      By default, the last 20 lines of the installation log are displayed. You can customize this setting using the Number of Log Lines menu option.

       These are the last 20 lines from the installation log:
      =============================================================
      Tuesday 03 February 2026  00:12:59 +0000 (0:00:00.361)       0:00:03.843 ******
      changed: [100.96.2.33]
      
      TASK [add the reprovision complete lock for this node] *************************
      Tuesday 03 February 2026  00:13:00 +0000 (0:00:00.468)       0:00:04.311 ******
      skipping: [100.96.2.33]
      
      PLAY RECAP *********************************************************************
      100.96.2.33                : ok=6    changed=3    unreachable=0    failed=0    skipped=1    rescued=0    igno0
      
      Tuesday 03 February 2026  00:13:00 +0000 (0:00:00.008)       0:00:04.319 ******
      ===============================================================================
      Gathering Facts --------------------------------------------------------- 2.60s
      Copy Install Logs ------------------------------------------------------- 0.81s
      add the install complete lock for this node ----------------------------- 0.47s
      Copy platform log ------------------------------------------------------- 0.36s
      Include pca-system-config ----------------------------------------------- 0.04s
      Check for tag ----------------------------------------------------------- 0.03s
      add the reprovision complete lock for this node ------------------------- 0.01s
      Tue Feb  3 00:13:00 UTC 2026  Install completed on pcamn01.
      =============================================================
      
      Installation is COMPLETE.
      Press ENTER to return... 

   3. Keep monitoring until the log output reports that installation is complete. Then return to the main menu.

10. Stay connected to the serial console. You use it again in Completing the Edge Platform Software Initial Setup and Configuration.

What's Next?

• Configuring the Edge Platform Software from the Graphical User Interface (preferred)
• Configuring the Edge Platform Software from the Service CLI