Turns on /usb-kiosk, a full-screen touch page where somebody
at the drive cabinet takes and returns a drive without signing in.
It is off by default: this is a write nobody has logged in for, so it is
a decision a site makes deliberately. While it is off, every kiosk
request is refused and the page says so.
The kiosk can only move a drive between checked out and checked in. It cannot add, edit or retire one. Each action is attributed to the SSO entered on the screen, and an SSO that matches no employee is refused - a checkout nobody can trace to a person defeats the point of tracking it.
Open the kiosk - also in the sidebar under Displays.
{{ linkMessage }}
Provision each screen once with Copy setup link above and open that link on the screen. The link carries a single-use setup code, not the token, so the token never reaches an address bar, a browser history or a proxy log. That browser keeps the token afterwards. Turning the kiosk on is a decision, not a credential - without this token the routes answer 404, so nobody who merely finds the URL can move a drive and sign it with a badge they guessed.
Copy this now and save. It is masked once stored.
Only fill this in when a proxy sits between the kiosk screens and this server. A request arriving FROM one of these addresses is never treated as a kiosk itself, so a proxy that sits inside an allowed network below cannot admit itself. Leave empty when browsers reach the server directly.
For people who open the kiosk on their own PC. A browser on one of these networks is admitted with no token and no login, so keep this to the shop-floor ranges rather than everything. Leave empty to require the token from every caller. Wall screens keep using the token either way.
Anyone on an allowed network can check a drive in or out against a badge number they guess, and the record carries that person's name. Badges are attribution, not authorization.
Off, a range wider than a site normally uses is refused when you save, and 0.0.0.0/0 is refused outright. Turn this on only to enter a wide range deliberately: every address in it can move drives with no token and no login.
The kiosk turns a badge number into an employee name without a login, so an allowed network can otherwise be walked to enumerate staff. On, a source that misses too many times in a row is refused for a while.
The kiosk asks first and names the holder, then records the SSO that actually handed the drive back. Turn this off to refuse a mismatch outright - but then a drive left behind by somebody on leave cannot be returned at the kiosk at all, and needs a signed-in user to sort out.