EmberNet Endpoint for Windows

The Windows endpoint is a single signed application, comprising one installer, a system-tray app, and a local web UI, that lets a Windows 10 or Windows 11 machine join the EmberNet fabric. It's built for engineer laptops, control-room HMIs, and factory-floor kiosks.

Under the hood, a Windows service (EmberNETEndpoint, running as LocalSystem, auto-start) does the real work and keeps your tunnels up whether or not anyone is logged in. The tray app and web UI are just the friendly face on top of it.

note

The service, installer, and install paths all spell the name EmberNETEndpoint, with a capitalized NET. That's the literal identifier Windows registers, so type it exactly as shown. The product itself is written EmberNet Endpoint.

How it connects

The Windows endpoint joins the EmberNet fabric over the same transports as the rest of the platform, all managed by the service:

Transport	Role
Flux	The primary path. The always-available zero-trust overlay. Rides outbound TCP/443, so it keeps working on restrictive networks.
ArcNet	The fast, encrypted IP tunnel. It needs UDP the network has to permit, so it ranks below Flux.
Bellows	An operator-toggled parallel tunnel for legacy point-to-point deployments. Not part of the automatic failover pair.

The service keeps Flux up and healthy and reports each transport's status to the tray, the local Status page, and the Dashboard. If the Status page shows ArcNet as the active path, Flux is down — that is the degraded state, not the fast one. Split-tunnel is the default, so the endpoint carries only EmberNet-assigned traffic and your normal network keeps working exactly as before.

Requirements

• Windows 10 or Windows 11, 64-bit
• Administrative rights to install (the installer prompts for elevation)
• Outbound HTTPS (port 443) connectivity
• A Microsoft account associated with your EmberNet tenant, for enrollment

Install

Get the installer, EmberNETEndpoint-Setup-x64.msi, from your EmberNet administrator or IT portal. If your organization manages devices centrally, it may arrive automatically through your MDM.

Double-click it. Approve the elevation prompt. The install is silent after that, with no questions and no bundled extras, and no reboot is required.

When it finishes:

• An EmberNet Endpoint icon appears in your system tray (click the ^ overflow arrow if you don't see it).
• The EmberNETEndpoint service starts and runs in the background.
• The local Status page becomes available at http://127.0.0.1:8765/.

First-time setup: accept and enroll

1. Open the local UI (from the tray menu, or browse to http://127.0.0.1:8765/). The first time, you'll land on the license page. Read it and click Accept. Enrollment won't start until the license is accepted on this machine.
2. On the Status page, choose Start enrollment. It shows a short code and a Microsoft login URL.
3. Open that URL in any browser, on any device, and sign in with the Microsoft account you use for EmberNet.
4. Enter the code shown on the enrollment page and confirm.

The wizard finishes on its own, the tunnels get configured, and the dots on the Status page turn green. If your account belongs to a single tenant, it's selected automatically; you only see a tenant picker if you legitimately belong to more than one.

The Status page

Each card on the Status page is a tunnel. Every card shows:

• A colored dot: green healthy, yellow connecting or reconnecting, red failed
• State: Disconnected, Connecting, Connected, Reconnecting, or Failed
• Last error: what went wrong most recently, in plain language
• Connect / Disconnect buttons

The Connect All and Disconnect All buttons at the top act on every tunnel at once, which is the usual case when you just want everything green.

The tray menu

Right-click the tray icon for:

• Open EmberNet Endpoint: launches the Status page in your browser
• Connect All / Disconnect All
• Exit: closes the tray only. The service keeps running and your tunnels stay up; the tray returns next time you log in.

Diagnostics and settings

• Diagnostics (/diagnostics) shows your machine's live network state as Windows sees it: adapters, IPs, DNS, and routes. It's the better version of "send me a screenshot of ipconfig /all."
• Settings (/settings) lets you change the update channel (stable by default), log level (info by default; set to debug if support asks), telemetry preference, and an outbound proxy URL if your organization requires one. Changes take effect immediately.

The service checks for a newer signed installer periodically and applies it automatically after verifying its signature, so a healthy endpoint stays current on its own.

Where the logs live

%ProgramData%\EmberNETEndpoint\logs\ contains a structured service.log plus a per-tunnel log for each transport. Files rotate automatically. If support asks for logs, zip the whole logs\ folder.

If something looks off

• The tray icon vanished. Windows sometimes drops tray icons after a shell restart. Log out and back in, or relaunch the tray app.
• The Status page won't load. In PowerShell, check the service: Get-Service EmberNETEndpoint. If it's stopped, Start-Service EmberNETEndpoint.
• One tunnel stays red. Click the red card and read Last error. If it isn't self-explanatory, screenshot it for your administrator. Repeatedly clicking Connect won't help.

Uninstall

Use Settings → Apps → Installed apps → EmberNet Endpoint → Uninstall, or from PowerShell:

msiexec /x EmberNETEndpoint-Setup-x64.msi /qn

By default this preserves your identity and configuration so you can reinstall later without re-enrolling. To remove everything, including identity and configs:

msiexec /x EmberNETEndpoint-Setup-x64.msi REMOVE_USER_DATA=1 /qn

Next steps

• Read the Overview for how the endpoint fits the platform
• Manage enrolled endpoints from the Dashboard