Enrollment is how you get a TAK device — ATAK on Android, iTAK on iOS, WinTAK on Windows, or TAK Tracker — set up to talk to . Every device needs two things: a Trust Store certificate (so the device trusts the server) and a unique Client Certificate (so the server recognizes the device).

Each Client Certificate is unique. Do not put the same Client Certificate on two different devices. If you lose a device or suspect its certificate is compromised, click the block icon on the device card in and re-enroll the device to get a fresh certificate.

QR enrollment hands the device its certificates and server settings in one scan — nothing to download, nothing to copy across.

1. In the inventory, find your device's card and click Enroll Device.
2. Pick the ATAK or iTAK tab.
3. Click Generate enrollment QR.
4. On ATAK: open the device's camera app and scan the QR. ATAK pulls down both certificates and the connection settings automatically.
5. On iTAK: open iTAK, tap Add Server, and scan the QR. iTAK will prompt for a one-time username and password — both are shown next to the QR.

The QR is single-use and short-lived. If it expires before you scan it, just generate a new one.

A Connection Data Package is a single .zip file that contains the certificates and server preferences. Use this when the device can't scan a QR but can import a file.

ATAK

1. From the device's card, click Enroll Device → ATAK tab → Download Connection Data Package.
2. Transfer the .zip to the device (email, USB, cloud drive).
3. In ATAK, go to Settings → Network Preferences → Configure Network Connections and import it.

iTAK

1. From the device's card, click Enroll Device → iTAK tab → Download iTAK Connection Data Package.
2. Upload the data package file to your iCloud Drive.
3. Launch iTAK and tap the gear icon on the top right.
4. Tap Network.
5. Tap Servers.
6. Tap the plus button on the bottom right.
7. Tap Upload Server Package.
8. Select the data package you uploaded to iCloud.

WinTAK and TAK Tracker don't support QR enrollment or Connection Data Packages — you'll need to import the certificates by hand. This path also works on ATAK and iTAK if you prefer it.

Open the device's Enroll Device dialog, pick your platform tab, then click Download Client Certificate and Download Trust Store. (You can also grab the Trust Store directly here using the button below.) Move both files onto the physical device (email, cloud drive, USB), then load them in the TAK app's connection settings using the values in the Device Connection Settings block below.

The TAK app will ask for a password for both the Trust Store and the Client Certificate. The Trust Store password is password, and the Client Certificate password is user-defined but defaults to .

TAK Tracker step-by-step

1. From the device's card, click Enroll Device → TAK Tracker tab → Download Client Certificate, leaving the password as atakatak.
2. Download the trust certificate too.
3. Move both files onto the device.
4. On your device, open TAK Tracker connection settings.
5. Enter your callsign.
6. Enter host .
7. Enter port 8089.
8. Load the client certificate and enter its password (atakatak).
9. Load the trust certificate, then choose Same as Cert PW.
10. Tap Done.

Username and password authentication is not required ( uses the certificates for authentication). You may need to click 'Advanced' within the device to import both certificates.

To confirm your device is connected, view the Connected status on the device card in .