Clear all pinned SmartLink certificates when rotating multiple radio TLS identities¶
Removes every trusted SmartLink TLS certificate that AetherSDR has pinned on first connect, allowing you to safely re-pin certificates after rotating radio identities or replacing radio hardware.
Before you start¶
- The radio must be connected to AetherSDR.
- You want to replace or rotate TLS certificates on multiple radios, and need to clear all stored trust-on-first-use pins.
Steps¶
- Open Settings > Radio Setup...
- Click the SmartLink tab.
- Click Forget all.
- In the confirmation dialog, click Yes to clear every pinned certificate.
What each control does¶
| Control | Behavior | Setting key |
|---|---|---|
| Pinned SmartLink Certificates section | Lists every host this client has pinned on first connect. Shows Host, SHA-256 fingerprint, and Pinned date. | (not persisted – managed by WanCertCache) |
| Forget selected | Removes the selected host's pinned certificate. Next connect to that host re-pins silently. | (none) |
| Forget all | Clears every pinned certificate after a confirmation prompt. Next connect to each radio silently re-pins. | (none) |
| SmartLink (tab) | Pinned SmartLink TLS certificate management. Lists each pinned certificate (host, SHA-256 fingerprint, pinned date) with per-row Forget and Forget All. | Lazy-built when first clicked. |
| Pinned SmartLink Certificates (section) | Section header for the pinned certs table inside the SmartLink tab. Lists every host this client has pinned on first connect (trust-on-first-use). | Pin schema: {fp, pinnedAt} objects. |
| Host / SHA-256 fingerprint / Pinned (table columns) | 3-column read-only table: Host (hostname), SHA-256 fingerprint (monospace), Pinned (YYYY-MM-DD or '(pre-phase 2)'). | Backed by WanCertCache in WanConnection.cpp. |
| Forget selected | Removes the selected host's pinned cert fingerprint so the next connect re-pins silently. | |
| Forget all | Clears every pinned cert (with confirmation). Next connect to each radio silently re-pins. | Shows QMessageBox::question before wiping. |
| Radio (tab) | Radio information, identification, license info and firmware update. All read-only fields include a clipboard copy button. | (none) |
| Radio SN | Chassis serial number (read-only). Includes a clipboard copy button next to the value. | |
| HW Version | Hardware version string. Includes a clipboard copy button next to the value. | |
| Options | Shows licensed radio options. Includes a clipboard copy button next to the value. | |
| Model | Radio model. Includes a clipboard copy button next to the value. | |
| License Info fields | Subscription, Expiration, Radio ID, Licensed version. Each includes a clipboard copy button next to the value. | |
| IP Address / Mask / MAC Address | Read-only network addresses. Each includes a clipboard copy button. | |
| Reboot Radio | Opens a confirmation dialog before rebooting the radio. AetherSDR disconnects and, for LAN connections, automatically reconnects after the radio boots. SmartLink/WAN requires manual reconnect. Button is disabled when radio is disconnected. | (none) |
| Network (tab) | Radio network information and advanced network options. | |
| Network MTU: | Sets maximum outgoing VITA-49 UDP packet size in bytes (576-9000). Default 1450. | NetworkMtu |
| Enforce Private IP Connections: | Rejects non-RFC1918 peers. Toggle button displays "Enabled" when checked. | |
| Audio Boost: | Enables extra gain on the client audio path. | AudioBoost |
| Audio Buffer: | Increases audio buffer in milliseconds for VPN/SmartLink jitter (50-1000 ms). Default 200. | AudioBufferMs |
| TX Follows Active Slice | TX follows the active slice. Mutually exclusive with 'Active Slice Follows TX'. Disabled automatically during Split operation. | TxFollowsActiveSlice |
| Active Slice Follows TX | Switches the active slice when TX moves externally (e.g. WSJT-X or CAT). Mutually exclusive with 'TX Follows Active Slice'. | ActiveFollowsTxSlice |
| Station Name | Identifies this AetherSDR client to other multiFLEX stations. Defaults to the OS hostname if empty. | StationName |
| Audio Compression (SmartLink): | Selects audio codec for SmartLink/LAN (Auto/Uncompressed/Opus). Default Auto. | AudioCompression |
| Prevent system sleep while connected | Keeps OS awake while radio is connected. | InhibitSleepWhileConnected |
| Decode: | Enables the CW decode overlay on the panadapter. | CwDecodeOverlay |
| Recording: Radio Side / Client Side | Picks radio-side or client-side recording. | RecordingMode |
| Save to: | Folder for saved recordings (client-side only). Defaults to Documents/AetherSDR/Recordings. | QsoRecordingDir |
| Auto-record on TX | Automatically records while transmitting. | QsoRecordingAutoRecord |
| Idle timeout: | Seconds of silence before recording stops (10-3600 sec). Default 120. | QsoRecordingIdleTimeout |
| Iambic Mode: A / B | Selects Curtis iambic mode A or B for both the radio and the local software keyer. | |
| GPS (tab) | GPS presence and live lat/lon/alt/time/satellites info. | |
| TX (tab) | TX timings, interlocks, max power, tune mode, waterfall display, slice/TX follow and TX Band Settings shortcut. | |
| Phone/CW (tab) | Microphone, CW keyer, RTTY defaults. | |
| RX (tab) | GPSDO frequency offset calibration and 10 MHz reference source. | |
| Audio (tab) | Radio audio outputs, compression, PC devices, boost, buffer, recording and NVIDIA BNR container. Tabs with many controls now include vertical scrollbars when content exceeds dialog height. | |
| Filters (tab) | Low-latency / Sharp filter options per bandwidth. | |
| XVTR (tab) | Per-transverter configuration -- RX Only, valid, remove, plus Create New Transverter. | |
| USB Cables (tab) | Assigns USB serial adapters to CAT, BCD, bit, and PTT cable types. | |
| Peripherals (tab) | External devices manual IP connection (TGXL, PGXL, Antenna Genius). Tabs with many controls now include vertical scrollbars when content exceeds dialog height. | |
| APD (tab) | External Adaptive Pre-Distortion sample port selection per TX antenna (ANT1, ANT2, XVTA, XVTB). Tab is hidden unless the radio reports apd configurable=1 (FLEX-8x00 with SmartSDR 4.2.18+). | |
| Themes (tab) | UI appearance settings including per-slice color overrides. Tabs with many controls now include vertical scrollbars when content exceeds dialog height. | |
| Serial (tab) | FlexControl serial port selection, baud/data/parity/stop, pin function assignment (DTR/RTS/CTS/DSR), paddle swap, auto-open, and button action mapping. | Build-gated by HAVE_SERIALPORT. |
| Select Installer... | Opens a file dialog for a SmartSDR installer (.msi, .exe) or pre-extracted .ssdr firmware file. | |
| Upload Firmware | Starts firmware upload with progress bar and status. | |
| Remotе On | Enables remote wake / remote-on. | |
| FlexControl | Detected state of FlexControl hardware. | |
| multiFLEX | multiFLEX enabled state. | |
| Region | Radio regulatory region. Includes a clipboard copy button next to the value. | |
| Nickname | User-friendly radio nickname. | |
| Callsign | Station callsign. | |
| Check for Update | Queries for firmware updates. | |
| DHCP / Static | Switches between DHCP and Static IP modes. | |
| Apply | Pushes the network config to the radio. | |
| TX Band Settings | Opens the dedicated per-band power/tune dialog. | |
| Connect / Disconnect (TGXL) | Opens/closes direct TCP connection to the TGXL on port 9010. | TGXL_ManualIp, TGXL_ManualPort |
| Connect / Disconnect (PGXL) | Opens/closes direct TCP connection to the Power Genius XL (default port 9008). | PGXL_ManualIp, PGXL_ManualPort |
| Connect / Disconnect (Antenna Genius) | Opens/closes connection to the Antenna Genius (default port 9007). | AG_ManualIp, AG_ManualPort |
Tips¶
- After clearing all pins, the next SmartLink connection to each radio will silently trust and re-pin the new certificate.
- Use Forget selected to remove a single host's pin if you are only updating one radio.
- On the Radio tab, click any copy button (clipboard icon) next to Radio SN, Region, HW Version, Model, Options, or License Info fields to copy the value to your clipboard. A small "Copied!" popup confirms the action.
- The Reboot Radio button is disabled when the radio is disconnected. For LAN connections, AetherSDR automatically reconnects after the radio boots. For SmartLink/WAN, you must reconnect manually.
- Tabs with many controls (Themes, Audio, Filters, Peripherals) now include vertical scrollbars when their content exceeds the dialog height, preventing the dialog from extending past the screen edge on small or high-DPI displays.