Beijer ELECTRONICS CloudVPN Agent Software User Guide

Beijer ELECTRONICS CloudVPN Agent Software

 

Function and Area of Use

This document describes how to install and activate the CloudVPN Agent on X3 web HMIs (pro, marine, and extreme) in a Docker environment.

CloudVPN, available as both hardware and software, enables secure communication over untrusted networks. It encrypts data using AES-256.

CloudVPN works as a virtual network extension. It allows you to access remote devices as if they were directly connected to your local network.

About This Quick Start Guide

This Quick Start Guide provides basic instructions for installation and activation. It does not replace the full product documentation.

Scope

This document uses the following hardware and software:

• X3 web (pro, marine, extreme)
• CloudVPN Agent (BAPP)

Additional Resources

For more information, refer to:

• Help Online
• Documentation Portal
• Connected Forum

Feedback

Send feedback about this document to:

support.europe@beijerelectronics.com

Copyright © 2026 Beijer Electronics AB. All rights reserved.

The information in this document is subject to change without notice and is provided as available at the time of publishing. Beijer Electronics AB reserves the right to change any information without updating this publication. Beijer Electronics AB assumes no responsibility for any errors that may appear in this document. All examples in this document are only intended to improve understanding of the functionality and handling of the software. Beijer Electronics AB cannot assume any liability if these examples are used in real applications.

Given the software’s wide range of applications, users must acquire sufficient knowledge to ensure it is used correctly in their specific application. Persons responsible for the application and the equipment must themselves ensure that each application is in compliance with all relevant requirements, standards, and legislation in respect to configuration and safety. Beijer Electronics AB will accept no liability for any damage incurred during the installation or use of this software. Beijer Electronics AB prohibits all modification, changes, or conversion of the software.

Introduction to CloudVPN Solutions

Beijer Electronics provides multiple CloudVPN solutions for secure remote access.

CloudVPN Gateway 

Provides: 

• Remote access
• Data logging
• Dashboard functionality

CloudVPN SecureEdge Pro 

Includes all features of CloudVPN Gateway, and adds:

• Docker support
• GPS/GNSS support (requires hardware with 4G/LTE)

CloudVPN Agent 

The CloudVPN Agent runs as a Docker container on the device.

• Provides remote access to the local device only
• Does not support routing to other devices

Network Architecture 

A CloudVPN network can include a mix of:

• Hardware routers
• Software-based routers

The system supports one-to-one connections between sites.

CloudVPN Agent Distribution

The CloudVPN Agent is distributed as a Beijer APP (.bapp file). Select the correct version based on the device architecture:

• ARM64
  Use CloudVPN vx.xx ARM64.bapp
  (for X3 Web and other ARM64 devices)
• ARMHF
  Use CloudVPN vx.xx ARMHF.bapp
  (for GL998x Programmable I/O and other ARMHF devices)

Download the BAPP files from the Beijer Electronics Smartstore.

BAPP Support
You can install and run multiple BAPPs on the same device at the same time.

Example Network Setup

In these examples in this quick start guide:

• LAN A is connected to the internet using DHCP
• LAN B uses a static IP address: 192.168.10.111

Install CloudVPN Agent on an X3 Web Device

You can install the CloudVPN Agent on X3 Pro Web, X3 Marine Web, and X3 Extreme Web devices. To transfer the installation file to the device, use a USB storage device.

1. Copy the CloudVPN BAPP file to the root directory of the USB storage device. Example file name:
   CloudVPN vx.xx ARM64.bapp
2. Power up the X3 web HMI panel.
3. Press and hold the top of the screen until Settings appears, then tap Settings.
4. Log in as Administrator.
5. Enter the password, then tap Login.
   Default password: 88282282
6. Open the Settings tab.
7. Scroll down and enable the following services:
   • Ping
   • SSH
   • Docker
8. Tap Save.
   NOTE: Remember to disable Ping after commissioning is complete.
9. Open the Apps tab.
10. Insert the USB storage device into the HMI panel.
11. Tap Add apps in the upper-right corner.
12. When the CloudVPN app appears in the list of available apps, tap Install.
    NOTE
    An Internet connection is required to complete the installation.
13. Verify that CloudVPN appears in the list of installed apps.

The CloudVPN Agent is now installed on the X3 Web HMI panel. The next step is to activate the CloudVPN Agent.

Activate the CloudVPN Agent on an X3 Web Device

After you install the CloudVPN Agent, you must activate it before use.

Before you begin:
Make sure SSH is enabled in X3 Web:
Settings > General > SSH

1. Open Command Prompt or PowerShell on your PC.
2. Connect to the device using SSH:
   ssh root@<device_ip>
   Example:
   ssh root@192.168.10.111
3. Enter the root password.
   The default password is printed on the label on the back of the device. Default password: BeijerLT4C
4. List running Docker containers:
   docker ps
5. Locate the CloudVPN container and note the Container ID.
6. You must also locate the Company ID:
   a. Log in to the CloudVPN Cloud.
   b. Open the application menu (top-right corner).
   c. Select Admin.
   d. In the Company section, select Identity.Alternatively: Click the profile icon in the top-right corner and copy the displayed Company ID.
7. To register the agent, run the following command:
   docker exec <Container ID> /usr/bin/ixagent-register.sh<Cloud Company ID>
   Example:
   docker exec 92cce0ffd150 /usr/bin/ixagent-register.sh 6693-0340-0000-0000-0000NOTE
   If the message “Failed to register the Agent” appears:
   • Verify that the device has an active internet connection.
   • Make sure the agent is not already registered to another company.

The CloudVPN Agent is registered to your company.
After registration, activate the CloudVPN Agent in the CloudVPN platform.

Activate the CloudVPN Agent in the Cloud Platform

This chapter describes how to activate the CloudVPN Agent in the Cloud Platform.

1. Open the CloudVPN Cloud Platform and log in to your Beijer account.
2. Select Fleet Manager.
   If 1 new device appears, the installation on the X3 web is complete and the device has internet access.
3. Select 1 new device.
4. Select the checkbox to activate the device.
5. Enter the required device information.
6. Click Activate device.
7. Enter the CloudVPN Agent Activation Key (PN: 602-0017).
8. Click Confirm.NOTE
   The license is valid only for the hardware where it is installed.
   If you perform a factory reset of the X3 web, the license is removed. You must then purchase a new license.
9. Click Continue.
10. Configure the LAN settings:
    a. Go to Fleet Manager > Network > LAN.
    b. Enter the LAN IP address of the X3 web (for example, 192.168.10.200).
    c. Enter the subnet mask (for example, 255.255.255.0).
    d. Click Confirm changes.

The CloudVPN Agent is now installed and activated.

You can now:

• Connect to the device remotely
• Use available CloudVPN functions

NOTE 

CloudVPN Agent does not support routing.

You can access only the device where the agent is installed.

The next step is to start the VPN connection to access the X3 web remotely.

Remote Access to X3 Web and BAPP Applications

This section describes how to access the X3 web and installed BAPP applications using CloudVPN.

Connect to X3 Web Using CloudVPN 

1. In the Cloud Platform, select the device in Fleet Manager.
2. Click Connect to establish a secure VPN connection to the CloudVPN Agent.When the connection is established, the VPN status indicates that the device is connected.
3. Locate the VPN IP address in the Cloud Platform under the device connection details.
4. Access the X3 web, with Command Prompt or Powershell, using the VPN address.
   Use the following format:
   <username>@<VPN address> Example:
   root@10.187.157.62

Connect to WebIQ Using CloudVPN 

WebIQ Runtime is a BAPP that allows you to run a WebIQ project on the X3 web.

1. Download WebIQ Runtime BAPP from Beijer Electronics SmartStore.
2. Copy the BAPP file to a USB drive.
3. Install the BAPP on the X3 web. For installation instructions, see the X3 web Configuration and Operation manual.
4. To access the WebIQ application (requires that the CloudVPN Agent is connected):
   a. Open a web browser.
   b. Enter the application URL using the following format:
   <IP address>:10123/<project name>
   Example:
   10.187.157.62:10123/main/

You can now:

• Access the X3 web remotely.
• Run and access WebIQ applications over a secure VPN connection.

Additional Information and Guidelines

CloudVPN agent license

The CloudVPN Agent license is locked to the hardware for the entire lifetime of the device.

If you uninstall the CloudVPN Agent or reset the hardware:

• The license is consumed.
• You must purchase a new license to continue using the service.

Resolve SSH Fingerprint Warning

When connecting to X3 Web using SSH, a fingerprint warning may appear.

This occurs when the device fingerprint has changed or does not match the stored value.

1. Locate the SSH known hosts file (.ssh).
2. Delete the entry that corresponds to the device IP address.
3. Run the SSH command again.
   Example:
   ssh root@192.168.10.111
4. When prompted, type yes and press Enter.
5. Enter the password and press Enter.

Restart Docker Container 

This section describes how to restart a Docker container on the X3 device.

1. Connect to the device using SSH:
   Example:
   ssh root@192.168.10.111
   Press Enter.
2. Enter the password.
   Default root password: BeijerLT4C
3. List running containers; enter: docker ps
4. Identify the Container ID.
5. Restart the container:
   docker container restart <CONTAINER ID>
   Example:
   docker container restart d475b2721155 The system restarts the selected container.

Remove Unused Data 

1. Open the Command Prompt.
2. Connect to the device using SSH: ssh root@<IP address>
3. Run the following command: docker system prune
4. When prompted, enter y and press Enter to confirm.
   The system removes unused data and displays the reclaimed disk space.

Data removed:
The command removes the following:

• all stopped containers
• all networks not used by at least one container
• all images without at least one container associated to them
• all build cache

NOTE 

Prune is also available in the settings menu on the X3 web.

How to Take a Screenshot 

This section describes how to take a screenshot from the X3 web using SSH.

1. Open the Command Prompt.
2. Start Powershell: Powershell
   Press Enter.
3. Connect to X3 Web using SSH:
   ssh root@<IP-address>
   Press Enter.
4. Enter the password and press Enter.
5. Take a screenshot:
   kmsgrab /<folder>/<file name> Example:
   kmsgrab /tmp/test1
6. Logout:
   logout
7. The screenshot is stored on the X3 web. Use SCP or an FTP client (for example, FileZilla) to copy the file to your computer.
   To use the Command Prompt, enter:
   scp root@<IP address>:/<folder>/<file name>.png .
   Example:
   scp root@192.168.10.111:/tmp/test1.png .
   The space followed by a dot ( .) copies the file to the current folder.

The screenshot is saved to your local computer.

NOTE 

• Screenshots are saved in PNG format only.
• The system stores screenshots in RAM.
• All screenshots are deleted when the device restarts.
• The maximum available storage for screenshots is 50 MB.
• If the screen saver is active, the screenshot is completely black.

Firmare Update of X3 web

• A firmware update preserves:
  • Docker containers
  • Settings
  • Licenses
• A factory reset deletes:
  • Docker containers
  • Settings
  • Licenses

Deleted data cannot be recovered.

Head Office
Beijer Electronics AB
Box 426
201 24 Malmö, Sweden
www.beijerelectronics.com / +46 40 358600