Dive In
Create your OCEAN account
Use the invitation code to create a new @the.ocean identity and register a passkey. After that, continue to the certificate portal for the rest of device onboarding.
Invite Gate
Unlock the onboarding form
Enter the invitation code you were given. The code is checked server-side and stored in a short-lived HTTP-only cookie.
What Happens
Provisioning sequence
1. Identity
The portal creates your Zitadel account, marks the new OCEAN mailbox as verified, and generates a passwordless enrollment link.
2. Mailbox
The same request pre-creates the mailbox in Mailcow so@the.ocean is ready immediately.
3. VPN
After passkey registration, install Tailscale and sign in against https://vpn.cqre.net.
4. Continue
Finish the rest of onboarding on https://certificate.id.ocean, where the certificate workflow stays available.