Skip to content
EntraLane Docs

Pairing & Authenticating Devices

To ensure you never have to type your administrator email or password onto a public-facing tablet or waiting room TV, EntraLane uses cryptographic Device Pairing. Each paired terminal is issued an isolated DeviceToken scoped strictly to that single device’s capabilities.

Step-by-Step: Pairing a Physical Device

  1. Open the Pairing Dialog in the Admin UI On your admin workstation, go to Devices or Visitor Flow. Click the action menu (⋮) on the target Kiosk, Desk, or TV Display and select Pair Device (or click the Unpaired status badge directly).

  2. View the QR Code & 8-Character Code EntraLane generates a temporary 8-character alphanumeric pairing code formatted as XXXX-XXXX (valid for 15 minutes) alongside a scannable QR code.

  3. Authorize on the Target Hardware Choose whichever method fits your hardware best:

    • Method A — QR Scan (Ideal for Tablets & Phones): Point the tablet’s camera at the QR code on your admin screen. It opens /pair?code=XXXX-XXXX with the code pre-filled.
    • Method B — Manual Code Entry (Ideal for TVs, Mini-PCs & Counter PCs): Open https://entralane.com/pair in the target device’s browser and type the 8-character code.

  4. Verify Auto-Detected Hardware Info & Confirm EntraLane automatically detects the device’s OS / Hardware Platform (e.g., iPadOS, Windows PC, Android Tablet) and Screen Resolution (e.g., 1920x1080). You can optionally customize the hardware label (e.g., “Samsung Galaxy Tab A9 — North Entrance”) and click Pair Device.

  5. Automatic Redirect to Live Terminal The browser stores its DeviceToken and redirects immediately to its assigned operational route (/kiosk/:slug, /desk/:slug, or /display/:slug). In your Admin UI, the pairing dialog automatically transitions to a green confirmation state and marks the device Online (Connected).

Silent Token Renewal & Security

  • 30-Day Rolling Refresh: As long as a paired terminal comes online periodically, it silently refreshes its DeviceToken in the background (POST /api/v1/devices/{id}/refresh-token) whenever the token is within 30 days of expiration. You never need to manually re-pair active devices.
  • Zero Captcha Interruptions: Paired kiosks authenticate ticket check-ins via their cryptographic X-Device-Token header, bypassing Cloudflare Turnstile interactive challenges so unattended touchscreens never get stuck.
  • Browser Storage Persistence: Because the DeviceToken is stored in the browser’s localStorage, always run terminals in a standard persistent browser profile — never in Incognito / Private Browsing mode or with “Clear site data on exit” enabled.

Replacing Hardware or Unpairing a Device

If you need to swap out a damaged tablet or move a counter terminal to a new PC, you do not need to recreate the device or rebuild your Visitor Flow links:

  1. In Devices, open the action menu (⋮) for the terminal.
  2. Click Unpair (or simply click Pair Device to issue a fresh pairing code).
  3. The previous DeviceToken is immediately invalidated on the server, disconnecting the old hardware.
  4. Complete the pairing flow on the replacement device.