🛠 Using PlugMate as an isolated network terminal
Objectives
This tutorial aims to configure the PlugMate as a secure access point for viewing internal data (intranet, shared files) without host applications being able to intercept traffic or data. We will leverage PlugOS's strict isolation and the encrypted USB-C channel.
Required Hardware
- A functional PlugMate (initial charge required via host).
- A compatible host (Windows, Linux, Android, or iOS) with the PlugMate client installed.
- A high-quality USB-C cable.
- Access to your corporate network or remote storage credentials.
- Active internet or LAN connection on the host.
Steps
- Host Client Installation: Download and install the official PlugMate client on your computer or smartphone. Ensure the local firewall allows local connections on the port used by the client.
- Physical Connection: Insert the PlugMate into the host's USB-C port. Wait approximately 24 seconds for the system to boot. The PlugOS interface will appear on the host's screen via the client.
- Network Configuration: In PlugOS settings, go to "Network". The PlugMate borrows the host's connection. Verify the connection icon is green. If on a corporate network, manually configure DNS if needed to resolve internal domain names.
- Resource Access: Open the integrated web browser or an SFTP/SSH client (if available in PlugOS's secure app store). Connect to your internal resources. Note that traffic is encrypted between the PlugMate browser and the remote server, and isolated from the host.
- Data Management: Download necessary files to the PlugMate's encrypted eMMC storage. These files are never written to the host's disk.
- Secure Disconnection: Close applications. To erase session keys, you can use the quick lock function or the duress PIN if an immediate threat is perceived.
Verification
To verify isolation, run a network monitor (like Wireshark) on the host while browsing on the PlugMate. You should only see encrypted traffic from the USB-C/PlugOS tunnel, without clear-text session data. Also, verify that downloaded files do not appear in the host's "Downloads" folder.
Going Further
Explore peripheral virtualization: test access to the host's camera via a secure application on the PlugMate to see how PlugOS isolates video streams. You can also configure simple automation scripts in PlugOS to synchronize encrypted folders at regular intervals, using the host's borrowed connectivity.