Take a new machine on

0knocking
26let in
0codes live

1 · Make a codegood for thirty minutes, and one machine

The code is what stops the file being worth stealing. Without one, running it does nothing at all.

New code gives you six characters to type at the machine. Open the door asks for nothing there — it lets the next machine from that shop in without typing, and shuts after thirty minutes or one machine, whichever comes first. Both are one shop and one machine; the only difference is whether somebody is standing there able to type.

2 · At the machinethe one step that needs hands

A computer nobody has touched has no way in, and that is the point — if this step could be done remotely, so could an attack. It takes about two minutes and never has to be done again.

1
Put the machine on the shop’s own network
Not the guest wi-fi. It has to see the hub, and the hub has to see it.
2
Get the file onto it
From a USB stick, or straight off http://kawa.mobiki.uk/connect.bat in the machine’s own browser.
3
Right-click it and run as administrator
It asks for the code above, turns on the way in, makes the machine a key of its own, and tells Kawa it exists.
4
Walk away
It appears below within seconds. Nobody needs to stand there for anything after this.

Download connect-to-zanpos.bat

3 · Knocking now nothing waiting

Nothing has knocked. A machine that has run the file appears here by name, with the address it is on and the moment it arrived — and stays there, authorised for nothing, until you press the button.

4 · Say what it isthen Kawa installs it

PICCADILLY-KIOSK2 192.168.100.237 · port 25830
let in 52d ago · GBD Doner - Piccadilly
the hub cannot reach it — key not installed
DESKTOP-4S28QB0 192.168.100.189 · port 25831
let in never ago
the hub cannot reach it — key not installed
DESKTOP-IQ42ECV 192.168.100.198 · port 25832
let in 40d ago
the hub cannot reach it — Command failed: ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectTimeout=10 -p 2232 Administrator@127.0.0.1 powershell -NoProfile -EncodedCommand JABh
GBDDONER 192.168.100.140 · port 25833
let in 40d ago
the hub cannot reach it — Command failed: ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectTimeout=10 -p 2233 admin@127.0.0.1 powershell -NoProfile -EncodedCommand JABhAGQAbQAg
DESKTOP-CD16DTJ 192.168.0.222 · port 25834
let in never ago
the hub cannot reach it — key not installed
DESKTOP-B003QT0 192.168.0.52 · port 25835
let in 39d ago
the hub cannot reach it — Command failed: ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectTimeout=10 -p 2235 Admin@127.0.0.1 powershell -NoProfile -EncodedCommand JABhAGQAbQAg
DESKTOP-R497A2T 192.168.0.118 · port 25836
let in 39d ago
the hub cannot reach it — Command failed: ssh -o BatchMode=yes -o StrictHostKeyChecking=no -o ConnectTimeout=10 -p 2236 Admin@127.0.0.1 powershell -NoProfile -EncodedCommand JABhAGQAbQAg
BOLDSTREET-HUB 192.168.100.50 · port 25837
let in 38d ago
the hub cannot reach it — no hub key on file for that shop — run "Read the hub keys again"
EXPRESS-HUB 192.168.100.41 · port 25838
let in 36d ago
the hub cannot reach it — no hub key on file for that shop — run "Read the hub keys again"
PERPADC2 10.0.14.15 · port 25839
let in 31d ago
the hub cannot reach it — no hub key on file for that shop — run "Read the hub keys again"
ALILAPTOP 192.168.1.20 · port 25840
let in 8d ago
the hub cannot reach it — no hub key on file for that shop — run "Read the hub keys again"

Installing gives the machine the app and starts it. It does not make it a till: a screen is paired to a shop and given its role in the ZanPOS panel, and that is what decides which menu it holds and where its orders go. Until then it shows nothing and takes no order.

Already enrolled

MachineShopOn its networkWay backSince
KIOSK-1GBD Doner - Deansgate (hub) 192.168.100.240port 25820 2026-08-03
DESKTOP-U0I1S8MGBD Doner - Piccadilly (hub) 192.168.100.197port 25821 2026-08-07
PICCADILLY-KIOSK2GBD Doner - Piccadilly 192.168.100.237port 25830 2026-08-11
DESKTOP-4S28QB0GBD Doner - Deansgate (hub) 192.168.100.189port 25831 2026-08-11
DESKTOP-IQ42ECVnot yet chosen 192.168.100.198port 25832 2026-08-17
GBDDONERnot yet chosen 192.168.100.140port 25833 2026-08-23
GBDDONERnot yet chosen 192.168.100.140port 25833 2026-08-23
DESKTOP-IQ42ECVnot yet chosen 192.168.100.198port 25832 2026-08-23
DESKTOP-CD16DTJnot yet chosen 192.168.0.222port 25834 2026-08-24
DESKTOP-B003QT0not yet chosen 192.168.0.52port 25835 2026-08-24
DESKTOP-R497A2Tnot yet chosen 192.168.0.118port 25836 2026-08-24
BOLDSTREET-HUBnot yet chosen 192.168.100.50port 25837 2026-08-25
EXPRESS-HUBnot yet chosen 192.168.100.41port 25838 2026-08-27
PERPADC2not yet chosen 10.0.14.15port 25839 2026-09-01
ALILAPTOPnot yet chosen 192.168.1.20port 25840 2026-09-24