ZeroTier Planet Console

Private control plane

Private ZeroTier control plane.

Manage networks, members, planet delivery, and onboarding from one self-hosted console.

Self-hosted Planet delivery Member authorization
ZeroTier Planet Console Private network control plane

Operator login

Sign in to the console

Use the initial credentials configured by the deployment. The first sign-in requires a new password.

First sign-in

Set administrator password

Use at least 8 characters with letters and numbers. Existing sessions are replaced after the password changes.

ZeroTier Planet Control plane
Overview Networks Client delivery Guide Settings
Signed in as admin Session active

Operations

Overview

Monitor controller health, planet delivery, and network readiness.

Control plane

Live deployment command center

Review operational status, resolve pending members, and open the next workflow from this dashboard.

Planet file --
Controller API --
Networks --
Members --

Deployment path

Controller endpoint Waiting for status
PlanetChecking artifact
ControllerChecking API
NetworksChecking targets
Planet file
--
Networks
--
ZeroTier address
--

Quick actions

Next operator steps

Network activity

Managed estate

Live data
Authorized members--
Pending members--
Routes--
Assignment pools--

Access

Console security

Use Settings to rotate the console password after deployment changes or operator handoff.

Server readiness

Checking
Public console URL
--
ZeroTier port
--
Console port
--
Default link lifetime
--

Generated files

0

Recent networks

Controller inventory

Client delivery

Rollout readiness

Planet fileChecking
Controller APIChecking
Network targetChecking

Create network

Networks

0

No network selected

Select a network or create one to manage members, routes, DNS, and address allocation.

Selected network

--

--

--Members --Routes --Pools --DNS
--

Members

Authorize devices, set bridge mode, add labels, and manage assigned addresses.

Name Member ID State Authorized Bridge IP assignments Delete member

Network basics

Easy setup

Set the managed route and IPv4 assignment range in one action.

Pool start and end are calculated automatically from the CIDR when left unchanged.

Address assignment

Danger zone

Delete this network only when every client has been migrated or decommissioned.

Add route

Use this for additional routes. Manage the primary IPv4 route from Easy setup.

Add assignment pool

Use this for additional IPv4 ranges. Manage the primary pool from Easy setup.

Routes

Assignment pools

DNS configuration

Controller JSON

{}
Planet file -- Checked after sign-in
Selected network -- Used by generated installer scripts
Temporary link TTL -- Signed links expire automatically

Link policy

Planet file readiness is checked after sign-in.

Planet file

wget download

For clients that already have ZeroTier installed.

Generate a link first.

Linux

Install and join

Installs ZeroTier, replaces planet, restarts the service, then joins a network.

Generate an installer first.

macOS

Install and join

Uses Homebrew or the official package, replaces planet, then joins with sudo when required.

Generate an installer first.
Create network Download planet Install clients Authorize members Troubleshooting
1

Create a network

Open Networks, create a private network, then apply Easy setup for the managed IPv4 route.

2

Generate delivery links

Open Client delivery to create temporary wget, Linux, or macOS commands.

3

Install clients

Run the generated script. It installs ZeroTier, replaces the planet file, restarts the service, then joins a network.

wget ... | sudo bash
4

Authorize members

New clients appear in Members. Authorize trusted devices and add clear labels for operations.

5

Troubleshoot rollout

Check that the planet file exists, signed links are reachable, and the controller API is responding.

Instance

Console URL
--
Controller
--
Planet file
--
Session
Active

Reset password

Use this after sign-in to replace the console password and invalidate existing sessions.

Confirm action

Are you sure?

This action cannot be undone.