Register VPE Node - Netskope Technical Documentation

After you successfully deploy the VPE Node, set up and then register it in your Netskope tenant.

Create Registration Token

After you configure the VPE Node, create a one-time registration token for VPE in the Netskope UI.

To create a registration token:

Go to Settings > Security Cloud Platform > On-Premises Infrastructure.
Click the Next-Gen tab.
On the Next-Gen page, click Registration Tokens.
In the Registered Tokens window, click Create Token and then the number of tokens you wish to create. You can create up to 10 tokens at a time.
Hover over the token you created and click Copy or Download.

Token content is hidden once you leave this page and cannot be retrieved again. If you lose it, create a new token.
View the new token in the Registered Token panel. The new row is highlighted with status Unused, an editable Token name field and the token text itself.

– Each token registers exactly one node and expires after 30 days.
– A new token row gets an editable Token name field. Name it after the node you are about to register so that it is easy to audit later.

Apply Registration Token

After creating the token, return to the VPE CLI to save and pair it with the VPE Node, completing the registration process. Use the following command to save the token:

configure
set dns primary <vpc-resolver-ip>
set system registrationkey <token>
save
exit

The node enrolls a device certificate with the Management Plane immediately and prints a Registration status block naming the tenant and the device ID, then starts tethering in the background. The token is consumed at this point and its row in the tenant flips to Used.

The registration process can take up to 20 minutes to complete, depending on network latency.

Verify VPE Node Registration

You can verify the success of the VPE Node registration from the Netskope UI and the VPE CLI.

In the Netskope UI, the VPE Node is displayed on the Next-Gen page with the VPE Node hostname and serial number.
In the VPE CLI, run status tethering to verify the VPE Node serial number. While it works you see tethering_in_progress and a device ID; the heartbeat block shows a connection error at first, which clears on its own once the node’s own callhome agent is up.

After you successfully deploy the VPE Node, set up and then register it in your Netskope tenant.

Create Registration Token

After you configure the VPE Node, create a one-time registration token for VPE in the Netskope UI.

To create a registration token:

Go to Settings > Security Cloud Platform > On-Premises Infrastructure.
Click the Next-Gen tab.
On the Next-Gen page, click Registration Tokens.
In the Registered Tokens window, click Create Token and then the number of tokens you wish to create. You can create up to 10 tokens at a time.
Hover over the token you created and click Copy or Download.

Token content is hidden once you leave this page and cannot be retrieved again. If you lose it, create a new token.
View the new token in the Registered Token panel. The new row is highlighted with status Unused, an editable Token name field and the token text itself.

Apply Registration Token

After creating the token, return to the VPE CLI to save and pair it with the VPE Node, completing the registration process. Use the following command to save the token:

configure
set dns primary <vpc-resolver-ip>
set system registrationkey <token>
save
exit

The registration process can take up to 20 minutes to complete, depending on network latency.

Verify VPE Node Registration

You can verify the success of the VPE Node registration from the Netskope UI and the VPE CLI.

In the Netskope UI, the VPE Node is displayed on the Next-Gen page with the VPE Node hostname and serial number.
In the VPE CLI, run status tethering to verify the VPE Node serial number. While it works you see tethering_in_progress and a device ID; the heartbeat block shows a connection error at first, which clears on its own once the node’s own callhome agent is up.