Getting Started

This guide will walk you through installing the KairOS Red endpoint agent, enrolling your device, and making your first secure connection.

Prerequisites

  • A KairOS Red account (sign up free at kairosnetwork.red)
  • A supported operating system:
    • Linux (x86_64, aarch64) — Ubuntu 22.04+, Debian 12+, RHEL 9+
    • macOS 13+ (Intel and Apple Silicon)
    • Windows 10/11 (x86_64)
  • Internet connectivity to the Cloudflare global network

Step 1: Install the Endpoint Agent

Choose your platform and follow the installation instructions:

Linux (Debian/Ubuntu)

curl -fsSL https://apt.kairosnetwork.red/gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/kairos.gpg echo "deb [signed-by=/usr/share/keyrings/kairos.gpg] https://apt.kairosnetwork.red stable main" | sudo tee /etc/apt/sources.list.d/kairos.list sudo apt update sudo apt install kairos-endpoint

Linux (RHEL/Fedora)

sudo dnf config-manager --add-repo https://rpm.kairosnetwork.red/kairos.repo sudo dnf install kairos-endpoint

macOS

curl -fsSL https://pkg.kairosnetwork.red/kairos-endpoint.pkg -o /tmp/kairos-endpoint.pkg sudo installer -pkg /tmp/kairos-endpoint.pkg -target /

Windows

# Download the MSI installer from: # https://msi.kairosnetwork.red/kairos-endpoint-latest.msi msiexec /i kairos-endpoint-latest.msi /quiet

For more detailed installation instructions, see the Installation Guide.

Step 2: Enroll Your Device

After installing the endpoint agent, enroll your device with your KairOS Red account:

kairos enroll --token YOUR_ENROLLMENT_TOKEN

You can find your enrollment token in the KairOS Red console under Devices → Enroll New Device.

The enrollment process will:

  1. Generate a device identity key pair (CRYSTALS-Dilithium)
  2. Exchange keys with the KairOS Red control plane
  3. Download your device certificate
  4. Register the device in your account

Step 3: Configure Your First VNI

Virtual Network Interfaces (VNIs) define your network segments. Create your first VNI:

kairos vni create --name "corporate" --cidr 10.0.0.0/16

Step 4: Connect

Start the endpoint agent and connect to your VNI:

kairos connect --vni corporate

Your device is now connected to the KairOS Red encrypted fabric. All traffic within the VNI is protected with post-quantum cryptography.

Next Steps