TFDM kiosk device

device-fastapi local sidecar

Enrollment token

Prefer the command line?

python -m device_fastapi enroll <token> --base-url <base_url>

status: …
device_id: …
expires_at: …
base_url: …
branding: …
renewal window: …
secret manager: …

peanut-it2 seeds this device fetched from its secret manager, using the same SSO token it holds for server/. Only a fingerprint is shown — the seed itself never appears in this UI or in a log.