the device requires you to run through the first time use setup process, which will automatically be initiated until you have created an administrator account. the device uses a simple wizard to guide you through the process but still offers little in detail on the differences between the choices on certificate authorities available with beta-v2.

you have three choices to operate the device, each with different advantages and disadvantages depending on your use-case and how much of on-core functionality you want to utilise.

• on-core: ca – register your device with your on.qx.cx account and manage the devices’ certificate online/offline through us - offers all functionality of on-core.
• private: ca – keep your device completely private and manage the complete certificate chain yourself offline through the device - offers all private on-core functionality.
• lets encrypt: ca – connect your device with lets encrypt and manage the devices’ certificate online/offline through lets encrypt - offers all private on-core functionality.

*offline refers to using the online manual features to download the renewed certificates and transferring them to the device manually – keeping the device disconnected from the Internet.

*online refers to using the on-connector software to allow the device to directly connect to and interact with the Internet – massively reducing the manual steps.

you only have the choice of the private: ca - but you could always update too!