Bulk Peripheral Management (Beta feature)
Bulk Peripheral Management is a new suite of tools, being introduced as a Beta feature in Q-SYS Designer 10.4, that allows faster deployment of Q-SYS peripherals and increases security through enforcing system wide security features such as password protection and secure communication. Instead of accessing each device's Q-SYS Peripheral Manager (QPM) webpage individually, you can configure network settings, DNS, Date & Time, 802.1x, and certificates for many devices at once.
Note: As this is being released as a Beta feature, please check the Known Issues page for current limitations. If you encounter a new issue report it to Q-SYS Support.
Note: As of the Q-SYS Designer 10.4 release, the following devices are not supported: NL-Series, NM-T1, QIO-AES8x8, QIO-GP8x8, QIO-IR1x4, QIO-L4o, QIO-LVR4, QIO-ML2x2, QIO-ML4i, QIO-S4, QIO-TEL2. To use in conjunction with Bulk Configuration please set a password to support Secure Communication and manage directly via Peripheral Manager.
Note: After initial setup, it is recommended to create a password backup file under Peripheral Utilities and download your settings as a CSV backup, which can be uploaded again if needed (e.g., after next design push). Peripheral Manager should only be used as a backup method if the Core is not available.
If the Bulk Configuration gets into a bad state and needs to be reset, use the following Troubleshooting methods:
Re-push the design (this intentionally resets Bulk Configuration).
Use the delete MAC address to factory reset a device.
If the Core is no longer available you can use your peripheral password backup to access the peripherals.
Factory Reset Peripherals if you have physical access.
Bulk Configuration
Use Bulk Configuration to configure and manage Q-SYS peripheral settings at scale. You can update settings either by uploading a CSV file or by editing directly in the Core Manager table.
Note: When using Bulk Configuration, the Core will claim the peripheral via setting up secure communication and a password. An admin can retrieve peripheral passwords for local QPM login via a password-encrypted file and Peripheral Utilities.
-
Q-SYS Designer v.10.1 or higher for all devices.
-
Core must be able to communicate to all target devices on the network.
-
Target devices' MAC Addresses need to be known.
-
Access Control must be enabled on the Q-SYS Core.
-
Secure Communication must be enabled on the Q-SYS Core.
-
A design must be deployed (running) on the Core with peripherals defined in its inventory.
-
The Core must be provisioned. If the Core is running Q-SYS 10.4 for the first time (new or factory-reset), you must complete the Provisioning process (creating a username/password and configuring Date & Time) before accessing Core Manager. See Core Provisioning Mode for details.
Note: Redundant setups are currently not fully supported.
Note: Peripheral Management is only available for "admin" role. If admins want to grant access to other users please create a "custom role".
Tip: If you want to use Bulk Configuration in conjunction with Peripheral Manager for certain devices, please set a password on each device to support Secure Communication and manage directly via Peripheral Manager.
Use this method to pre-plan and provision a large number of devices, or when the person entering configuration data is not working directly in Core Manager.
-
Download a CSV template:
-
In Core Manager, open Peripheral Management > Bulk Configuration, enter edit mode, and export the CSV template, or
-
In Q-SYS Designer, go to Tools > Inventory to export the template (recommended after creating your design inventory with the correct naming convention).
-
-
Fill in the template in a spreadsheet application.
During initial configuration, the following settings can be pushed via CSV:-
MAC Address — maps a physical device to a design hostname
-
LAN A settings (Mode [Auto and Static], IP Address, Netmask, Gateway, Static Routes)
-
LAN B settings (Mode, IP Address, Netmask, Gateway, Static Routes)
-
DNS (DNS Servers, Search Domains)
-
-
Import the completed CSV file into Bulk Configuration.
Note: Ensure your file is saved as CSV with comma (,) separators. If you receive a file type validation error, check that the format is correct.
Note: If you configure only LAN B settings, please choose the Mode for LAN A as well (Auto or Static).
Use this method to configure or adjust settings directly within Core Manager.
-
In Core Manager, open Peripheral Management > Bulk Configuration.
-
Click Edit to enter edit mode.
-
Select one or more devices and edit their settings directly. Use Bulk Edit to apply the same change across all selected devices:
-
IP Address — when bulk editing, IP addresses increment by 1 automatically across selected devices.
-
All other fields — the same value is copied to all selected devices.
-
-
Click Save to apply changes, or Cancel to discard.
Note: When in edit mode, ensure you save or cancel before leaving.
When you save for the first time, Bulk Configuration initiates the provisioning process for each peripheral:
-
Firmware check and update — The Core verifies the peripheral's firmware and updates it if needed.
-
Secure communication — The Core establishes a trusted connection and claims the device.
-
Hostname assignment — The hostname from your design is pushed to the device.
-
User-provided settings — Network, DNS, and other configured settings are applied.
Tip: After first-time configuration of the devices, when a new design is pushed, or a design is updated, Bulk Configuration is reset. To quickly resume just add MAC Addresses to the devices instead of the whole configuration.
After initial setup, the following additional settings can be configured:
| Setting | Notes |
|---|---|
| Date & Time |
Timezone, Date, Time, NTP Servers. The Core is the primary source of date and time for peripherals. NTP synchronization adds a secondary redundant NTP server. |
| 802.1x |
Enable/Disable, TLS Identity (Username), Domain, Device/Client Certificate, Port Status. Currently only TLS mode is supported. |
| Secure Communication |
TOFU (Trust On First Use) is enabled by default and cannot currently be disabled. Possible configurations:
|
Each peripheral displays one of the following status indicators:
| Status | Description |
|---|---|
| Not Reachable |
The device cannot be contacted. It may not be provisioned yet, may have no network connection, or secure communication may have failed. |
| In Progress |
Device is being provisioned. |
| OK |
Communication is established and settings have been updated successfully. |
| Failed |
The Core failed to fetch or update device data. A Retry option is available. |
| Password Mismatch |
The set password on the peripheral does not match the Cores' known password. Please change or factory reset. |
| Certificate Mismatch |
The certificate on the device is not equal to the certificate trusted by the Core. Please decline from Secure Communication or approve if it is pending. |
-
Groups: Create custom groups (up to 100) to organize peripherals.
-
Search: Use the search function to find devices by name or model.
-
ID: Toggle the ID function on a device to physically verify system connectivity and assignment. The device's identification indicator (LED or display) activates, making it easy to locate the physical device.
-
Info: View additional device information (Link Speed, MAC Address, LLDP Information, Device Type, Model, Firmware Version, Serial Number, etc.).
-
Export: Export all information as CSV.
-
Device Reboot: Reboot one or more peripherals.
-
System information download: Download system information for troubleshooting.
-
Reset password: Reset peripheral passwords as needed.
-
Deleting a MAC address from a provisioned peripheral triggers a factory reset of that device. Use this carefully and only when you are certain you want to remove or change the MAC address assignment.
Tip: Post factory reset, the device will boot in "auto" mode for network settings. If you use static IP addresses, this might lead to a "not reachable" state.
-
Swapping a MAC address (reassigning a hostname to a different physical device) requires two steps:
-
First delete the existing MAC address and allow the factory reset to complete,
-
then assign the new MAC address.
-
-
Swapping a Core: Before replacing the Core processor, download a copy of the password file (from Peripheral Utilities) and factory reset all peripherals so they can be claimed by the new Core via Bulk Configuration. Also make sure you have a copy of the device's MAC Address (e.g., through downloading the CSV export).
Bulk Certificate Management
Note: Bulk Certificate Management supports up to 650 peripherals.
Use Bulk Certificate Management to view and manage peripheral certificates across your entire system from a single page.
-
View certificate status: See the certificate state, validity, and common name for all peripherals at a glance.
-
Bulk CSR generation: Generate Certificate Signing Requests for multiple peripherals at once.
-
Bulk certificate upload: Upload signed certificates to multiple devices at once.
Note: Certificate Management has the same prerequisites as Bulk Configuration (Access Control enabled, Secure Communication enabled, running design on Core).
Peripheral Utilities
Use Peripheral Utilities to perform maintenance and administrative tasks across your peripherals.
-
Download peripheral passwords: Export a password-encrypted ZIP file containing the passwords for all managed peripherals. Use this to access a device's local QPM interface if needed, or as a backup before swapping a Core processor.
Configuring Peripheral Management
Save and deploy the design to the Core. (No need to adjust hostnames via Peripheral Manager for configuration or update. Bulk Configuration will handle this automatically.)
-
Ensure the Core is provisioned (Q-SYS 10.4 onboarding completed).
-
Ensure Access Control and Secure Communication are enabled (Network > Secure Communication).
-
Select Peripheral Management from the Core Manager menu.
-
Open Bulk Configuration to begin configuring peripherals using either the CSV Upload or In-Table Editing method (see above).
-
After initial setup, configure additional settings (Date & Time, 802.1x, Secure Communication) as needed.
-
Use Certificate Management to manage device certificates.
-
Use Peripheral Utilities to download password files or perform device maintenance.
As peripherals connect to the network, the Core automatically discovers them, matches them by MAC address, and pushes the configured settings.
