Connecting and Authorizing a New Device with ZeroTier
1. Purpose
This SOP defines the standard process for installing, connecting, and authorizing a new device on a ZeroTier virtual network to ensure secure and consistent access.
2. Scope
This procedure applies to all endpoints (workstations, servers, appliances, and IoT devices) that require access to a ZeroTier-managed network.
3. Prerequisites
Before beginning, ensure the following:
-
You have administrator access to the ZeroTier Central portal
-
You have the Network ID for the target ZeroTier network
-
The device has internet connectivity
-
You have local administrative privileges on the device
4. Responsibilities
-
Technician / Engineer
-
Install the ZeroTier client
-
Join the device to the network
-
Validate connectivity
-
-
Network Administrator
-
Authorize the device
-
Assign IP and network policies as required
-
5. Procedure
5.1 Install the ZeroTier Client
-
Navigate to: https://www.zerotier.com/download/
-
Download the appropriate client for the operating system:
-
Windows
-
macOS
-
Linux
-
Mobile (iOS / Android)
-
-
Install the client using default settings unless otherwise specified.
5.2 Join the ZeroTier Network
-
Launch the ZeroTier client:
-
Windows/macOS: Open the ZeroTier application or system tray icon
-
Linux: Use the command line
-
-
Join the network using the Network ID:
-
GUI:
-
Select Join Network
-
Enter the Network ID
-
-
Command line (Linux):
sudo zerotier-cli join <NETWORK_ID>
-
-
Confirm the device shows “REQUESTING_CONFIGURATION” or similar status.
5.3 Authorize the Device in ZeroTier Central
-
Log in to ZeroTier Central: https://my.zerotier.com
-
Select Networks
-
Choose the appropriate network
-
Scroll to the Members section
-
Locate the new device (identified by Node ID or device name)
-
Check the Authorized box
-
(Optional but recommended):
-
Assign a friendly name
-
Assign a static managed IP
-
Apply tags or rules if used in your environment
-
5.4 Verify Connectivity
-
On the device, confirm it shows CONNECTED status
-
Verify the assigned ZeroTier IP address
-
Test connectivity:
-
Ping another ZeroTier device
-
Access a known internal resource
-
-
Confirm traffic flows as expected per network policy
6. Post-Configuration Tasks
-
Document the device:
-
Device name
-
Assigned ZeroTier IP
-
Network ID
-
Date authorized
-
-
Confirm firewall rules or local security software are not blocking ZeroTier traffic
-
Ensure the ZeroTier service is set to start automatically on boot
7. Troubleshooting
| Issue | Resolution |
|---|---|
| Device not appearing in Central | Confirm correct Network ID and internet access |
| Stuck in “REQUESTING_CONFIGURATION” | Ensure device is authorized in Central |
| No connectivity after authorization | Check local firewall and ZeroTier network rules |
| Intermittent connectivity | Verify UDP 9993 is allowed outbound |
8. Security Notes
-
Only authorize known and approved devices
-
Remove unused or decommissioned devices promptly
-
Use network rules and segmentation where possible
-
Periodically audit authorized members
9. References
-
ZeroTier Documentation: https://docs.zerotier.com
-
ZeroTier Central: https://my.zerotier.com