Skip to content

Security & maintenance

Each SenArch ARCH-1 Standard LoRaWAN Gateway ships with a unique admin password — shown on the gateway label as the Default Password. It is unique to each gateway, not a shared default, and is also available from SenArch. This page covers changing that password, checking the installed versions, and factory resetting the gateway.

Change the password

The admin password is used for both the Gateway UI and SSH. Its initial value is the Default Password printed on the gateway label. Change it from the Gateway UI:

  1. Open Account in the Gateway UI.
  2. In Change Password, enter your current password and a new one. The new password must be at least eight characters and contain at least one letter and one number, and must differ from the current password.
  3. Save. You are signed out and must sign in again with the new password.
Factory reset resets the password

A factory reset reverts the admin password to the Default Password on the label.

Change the password over SSH

From an SSH session, run passwd and follow the prompts. Characters are not shown as you type. The change applies to the Gateway UI as well.

Check software and hardware versions

In the Gateway UI, open Dashboard → Gateway Info and select Refresh Gateway Info. It shows:

  • Serial Number and Hostname
  • Gateway EUI (used for Basic Station) and Concentrator EUI (used for the UDP forwarder)
  • Hardware Version
  • OS Version (for example SenOS 2.0.1)
  • Charge Controller Firmware Version

The CoHost reports its own software version. To see it, open Dashboard → CoHost Info & Controller and select Refresh CoHost Info — it shows the CoHost serial number, software version, and transmission interval. See CoHost setup for the CoHost LoRaWAN keys.

Scheduled reboot

The gateway can restart itself on a schedule, which helps keep long-running, unattended deployments healthy. In the Gateway UI, open Settings → Gateway → Scheduled Reboot and choose one:

  • none — no automatic reboot (the default)
  • daily, weekly, or monthly — the gateway reboots once per interval, at a randomized time near the end of the interval

Select Save Changes to apply.

Factory reset

A factory reset restores the gateway to its factory state and removes customer provisioning such as WiFi, VPN, and LoRaWAN settings. The device keeps its identity (serial number), but the admin password reverts to the Default Password on the label — any password you set is undone.

Use with care on deployed gateways

After a factory reset, SenArch cannot guarantee that a gateway already deployed in the field will be reachable again, because its network provisioning is cleared. Reset a remote gateway only if you can re-provision it.

There are two ways to trigger a reset.

From the Gateway UI:

  1. Open Settings and select Factory Reset.
  2. Confirm by entering the Default Password from the gateway label — not your current password.

With the hardware reset button:

First make sure the gateway has finished booting — allow about three minutes after power-on. A button press before the gateway is ready has no effect.

  1. Press and hold the reset button. The status LED blinks slowly for the first 10 seconds, then quickly.
  2. Keep holding for a full 15 seconds. At that point the gateway accepts the reset and reboots on its own — you do not need to release the button. It re-applies its factory configuration on the next boot.

The gateway can take up to five minutes to become available again after a reset or reboot.

Tamper detection

The CoHost monitors for physical tampering. It raises an immediate alert if the enclosure is opened (PIR sensor) or if the unit falls (accelerometer). These alerts are sent over the CoHost's LoRaWAN link — see CoHost setup for details and the alert fields.

Next steps