The onboarding process for GENAccess — a zero-trust networking platform built on WireGuard and powered by NetBird — is designed to securely and efficiently grant authorised users access to your organisation’s network resources. Below is a step-by-step guide to complete the onboarding process.

1. Client Information Collection

To begin onboarding, collect the following details from the client:

• Forename
• Surname
• Nickname (e.g., a preferred display name)
• Access Profile (e.g., “Standard User”, “Admin”, “Remote Support”)
• Email Address

Note: The access profile determines the client’s allowed reach, including permitted network paths, exit nodes, and posture checks (such as device compliance, OS version, or security software).

2. Email Invitation and Password Setup

Once the user account is created:

• An automated email is sent to the client’s email address.
• The email contains a secure link to set a password and optionally enable two-factor authentication (2FA).
• The client must:
• Click the link in the email
• Set a strong password
• Enable 2FA if desired (via Google Authenticator or similar)

Important: The client must complete this step before installing the NetBird client.

4. Install NetBird Client Software

The client must install the NetBird client software on their device.

Walkthrough's are provided at the following URL for Windows, MacOS and Linux.

Client Installation

5. First Connection Attempt

After installation and configuration:

• The client will attempt to connect to the GENAccess network.
• The NetBird client will display a status: Waiting Approval

Note: New Clients require an Approval steup which must be done by the HelpDesk before you will be fully active. This is normal. Update your HelpDesk, Service Desk, Manager etc. 

6. Authorisation & Approval

Once the client has attempted to connect:

1. GEN Will verify the configuration.
2. Assign your posture, and access profile.
3. Approve the Connection. 

Prerequisites for Successful Onboarding

Ensure the following are in place before starting:

• Your Operating System is up to date. 
• Any endpoint protection permits the client to reach out. 
• Your NOT using any other VPNs.
• You are connected to the ISP/Country/IP you should be. 

Troubleshooting Tips

• If the client cannot connect:
• Verify the Management URL is set correctly (https://bird.gen.network)
• Check the client’s internet connection
• Ensure the device allows outbound UDP traffic on port 51820
• Confirm the client has completed password setup and 2FA (if required)

For further assistance, contact the GEN HelpDesk or raise a ticket via the portal.

For more details, refer to the GEN Managed VPN Policy at Managed VPN Policy.