Troubleshooting Installation & Working with IT
If this is your first time installing Onboard's Edge Software, this guide is for you. Network environments and IT policies can sometimes introduce challenges. This guide outlines the most common troubleshooting steps and how to work effectively with your IT team to get things up and running.
If you have successfully installed the Edge Software and powered on the VM, but the deployment status in the Onboard App remains Offline, work through the checks below.
Verify Firewall & Network Permissions
Ensure outbound traffic is permitted from the Edge VM
- TCP 443 : Required for secure HTTPS communication with Onboard's cloud.
💡 When running in Bridged mode, the Edge VM should appear on the building network as a distinct device with its own IP address. If your IT team enforces outbound whitelisting, provide them the Edge VM's IP address to confirm traffic is permitted to Onboard's servers.
Confirm the VM's Network Adapter Mode
- Open your virtualization manager (e.g., VMware).
- Locate the Onboard VM and open its Network Adapter Settings.
- If the adapter is set to NAT mode, switch it to Bridged mode.
- NAT mode isolates the VM behind the host machine, preventing it from appearing as a distinct device on the LAN.
- Bridged mode allows the VM to obtain an IP address on the same subnet as your building's BACnet or Modbus devices which is required for device discovery and data collection.
- Restart the VM to apply the change.
Confirm Whitelisting with IT
If your IT department enforces strict firewall rules or MAC-based network access controls:
- Retrieve the VM's MAC address from your virtualization manager.
- Share it with your IT team to whitelist the Edge VM for network access.
- If DHCP is in use, confirm the Edge VM is receiving a valid IP address on the correct subnet.
⚠️ Still Not Connecting?
If all checks are complete and the deployment remains offline:
🤝 Working With IT
A few best practices for a smooth collaboration with your IT or OT team:
- Share requirements early. Provide your IT team the Network & Connectivity Requirements ahead of time so they can prepare firewall rules and network access before installation day.
- Reassure them on security. Onboard does not require any inbound firewall access. All communication is outbound. SSH access to the Edge Software is only available through an encrypted WireGuard® VPN tunnel, and only when explicitly enabled during Collector setup.