Manual backup — one click produces a package with configuration, database and certificates, integrity-verified.
Scheduled backup — enable, pick frequency (daily/weekly) and time of day; retention by days and by number of packages.
Email notifications — outcome of every backup (success/failure) via SMTP.
Restore — from an uploaded package or from the list of stored backups; Restore from R2 retrieves cloud copies when configured. Selective Components restores only the parts you choose.
Updates
Review application and operating-system updates separately. Follow the release procedure approved for your appliance profile.
Application tab
The release channel can show available versions and changelogs. On the TET-hardened PoC, installation by the web process is blocked: a vendor-signed, root-controlled release path must be qualified before application upgrades. Do not add generic package or root privileges to the web service to bypass the restriction. Arrange an approved maintenance window, backup, release verification and post-install health checks with the vendor.
System tab
Ubuntu package updates use the guarded package workflow. Review disk space and package state, take a verified backup, install approved updates, check service health and reboot when required.
Scheduler tab — Scheduled Tasks
The built-in scheduler for recurring jobs:
Task
What it does
Backup
Scheduled backup with notification
System / Application update check
Periodic update checks
Vulnerability check
Periodic CVE scan
NTP Sync
Forced time synchronization
Health check
Overall health verification
FreeRADIUS validation
RADIUS configuration validation
Generate compliance evidence
Collect a point-in-time appliance evidence snapshot for review
Generate support bundle
Diagnostic package
License refresh
License revalidation
Cleanup logs/artifacts
Retention-based file cleanup
Per task: name, type, frequency (manual/hourly/daily/weekly/monthly), enable/disable, last result, next run, execution log and Run now. Task configuration can be exported/imported as JSON.
Captive Portal
Guest access on an open network with a branded splash page.
Portal Profiles — per SSID/NAS, mode Voucher (code required) or Open (Splash) (terms acceptance only); per profile: VLAN, session duration, up/down bandwidth limits, max concurrent sessions, idle timeout.
Generate Vouchers — bulk codes with validity, max uses, session duration and bandwidth caps; print/export for the front desk.
Portal Appearance — logo, colors and texts of the welcome page.
Guest Sessions — active guest sessions with MAC, IP and voucher used; manual disconnect.
A full configuration walk-through is in the Captive Portal article.
Diagnostics
Health overview — state of every service (RADIUS, database, web, time sync, collector…) with error detail and suggested actions.
Interface Status / Network Summary — network interfaces, IPs, link state.
Connectivity tests — towards NTP, DNS, gateway and directory (Entra/LDAP); each test shows target, outcome and hints.
Support bundle — generates a diagnostic archive (sanitized configuration + health state) to send to support.