Deployment

Self-host your way

Two editions of the same engine. Start on Windows today — a cross-platform .NET Server edition for containers and Linux packages is on the roadmap.

Available now

Windows Edition

A hardened Windows Service with the Blazor admin console and the GeoLibre COP. Install in minutes from an Inno Setup EXE — no source tree or .NET SDK required on the target.

  • Native .NET 10 Windows Service (TMGRealTimeEngine)
  • Blazor admin at /console · COP at /cop
  • Inno Setup EXE installer (x64, Win 10+)
  • MANET edge profile & multitenancy built in
  • Optional WPF console for local ops

Install steps

Coming

Server Edition (.NET)

The same engine as a cross-platform .NET deployment: OCI containers for Kubernetes, plus RPM / DEB / APK packages for bare-metal Linux hosts.

  • Docker / OCI images
  • Kubernetes Helm charts
  • RPM · DEB · APK native packages
  • Same CoT / Marti / COP surface

Join the early-access list →

Windows Edition · field install

From zero to operational in minutes

Publish, install as a hardened Windows Service, and open the console. Or build a Setup EXE for airgap USB distribution.

1 · Publish

Produces the service + console output under artifacts/publish/.

PS> .\scripts\publish.ps1

2 · Install as a service

Generates AdminToken + EnrollmentPassword, hardens ACLs, sets failure recovery.

PS> .\scripts\install-service.ps1 -PublishDir artifacts\publish\service -Start -OpenFirewall

3 · Or build a Setup EXE

Inno Setup 6 — clean-machine install with no SDK required.

PS> & "${env:ProgramFiles(x86)}\Inno Setup 6\ISCC.exe" .\installer\tmg-tak-server.iss

MANET / radio edge

Deploy on an IP MANET radio LAN so EUDs enroll and stream using the radio IP, not localhost. The advertised mesh IP is written into TLS SANs.

PS> .\scripts\install-service.ps1 -ManetEdge -AdvertiseAddress 10.10.0.2 -OpenFirewall -Start

Day-1 URLs

URLWho
http://127.0.0.1:18443/consoleAdmins (AdminToken)
http://127.0.0.1:18443/copOperators (TAK user)
GET /healthLiveness
GET /readyReadiness (DuckDB open)

Secrets are written once to %ProgramData%\TMG\RealTimeEngine\INSTALL_SECRETS.txt.

Production hardening, fail-closed by default: admin bound to localhost, Marti APIs kept off the admin port, plain-HTTP Marti disabled, open enrollment disabled, DuckDB admin query disabled — and a startup validator refuses insecure production configs.

At a glance

Deployment options compared

OptionEditionAvailabilityBest for
Inno Setup EXE Windows Now Airgap USB install, field hosts, no SDK on target
Windows Service Windows Now Production server, auto-start, hardened ACLs
MANET edge profile Windows Now Radio LAN, mesh IP in TLS SANs, low-bandwidth collab
Multitenant (SaaS-ready) Windows Now Multiple isolated teams on one host (SNI demux)
Docker / OCI image .NET Server Coming Container orchestration, ephemeral scale-out
Kubernetes (Helm) .NET Server Coming Cloud-native deployments, declarative ops
RPM · DEB · APK .NET Server Coming Bare-metal Linux, package-managed hosts

Server Edition (.NET)

Want containers and Linux packages?

The .NET Server Edition brings the same CoT / Marti / GeoLibre COP surface to Kubernetes, Docker, and native RPM / DEB / APK packages. It's on the roadmap — join the early-access list to shape priorities and get notified at launch.

Join early access See the engine

Stand it up on your network

We'll walk you through a Windows install and enrollment, end to end.

Request a walkthrough View pricing