SMARTTILE · DEVICEAUTOMATE™ · HPE ARUBA INSTANT ON

Aruba Instant On, monitored around the clock — with two-step verification left on

One dedicated portal account is all it takes: SmartTile reads every Instant On site's switches, access points, ports, PoE, clients, SSIDs and the portal's own alerts, and turns a device going offline into the same alert and ticket as any other outage.

SmartTile integrates with
The HPE Aruba Instant On cloud (portal.arubainstanton.com / portal.instant-on.hpe.com) — through the same northbound REST API the Instant On portal and app use (HPE publishes no official API), signed in as a dedicated portal account: e-mail, password and, if two-step verification is on, its authenticator key.
How SmartTile automates it
Every 60 seconds SmartTile reads each site's 1830 / 1930 / 1960 switches and AP11–AP25 access points — status, ports, PoE, radios, site health and the portal's alerts — and generates the 2FA code itself when HPE asks. A device that goes offline or drops out of the site's inventory, once mapped to its SmartTile device, is marked DOWN with state history and alerts and tickets like any outage; if SmartTile can no longer sign in, your admins are e-mailed.
Category
DeviceDeviceAutomate™

Instant On is built for sites without a network engineer on hand — and it has no official API, no SNMP and no CLI in cloud mode. So a 1930 switch at a branch goes dark and nobody hears about it until the phones stop. SmartTile signs in to the Instant On cloud the way the portal does, reads only, and puts every site next to your circuits and firewalls, with the ticket in the IT Service Management (ITSM) system you already use.

What the Instant On connection turns on

Every site and device

Sites, then each site's inventory: 1830 / 1930 / 1960 switches and AP11–AP25 access points with serial, MAC, model, IP, firmware, uptime and client count.

Status every 60 seconds

Online, offline, or reachable-but-busy (firmware update, reboot) per device from the cloud. Adjustable 30–3,600 s. A device missing from its site's inventory for 3 two-minute periods is offline.

DOWN, history and the ticket

Map an Instant On device to its SmartTile device (ping off) and the portal owns its up/down: DOWN with state history, then the normal alert and auto-ticket after 14 min offline.

Ports, PoE and radios

Every switch port (link state, PoE delivered, total watts) and every AP radio, the uplink device, and a “firmware update available” flag per device.

Site health and alerts

The portal's site health and reason, wired / wireless clients, 24-hour traffic, and the portal's own alert feed — raised and cleared times kept.

Clients and SSIDs

Wired and wireless clients every 10 minutes (SSID, VLAN, signal, band, OS, the AP or switch they are on) and every SSID with its security and client count.

How it goes live — the three-step wizard

  1. Cloud mode. In portal.arubainstanton.com confirm every switch and AP is in a site's inventory. A switch in local management is invisible to the cloud — switch it back to Cloud management.
  2. Dedicated account. Site management → Administrators → Invite e.g. smarttile@yourcompany.com; accept it and set a long, random password. Repeat per site you want monitored.
  3. Keep 2FA on. As that account: Account → Security → two-step verification → set up → Copy key. No 2FA? Leave the key blank.
  4. In SmartTile: DeviceAutomate → Aruba Instant On → Connect SmartTile → e-mail, password, key → Save & Test. It shows the sites it can see and starts discovery.
  5. Map devices under Aruba Manager → Devices → SmartTile Mapping so outages reach the SmartTile device.
FieldWhere it comes from
Portal e-mailThe dedicated account you invited
PasswordSet when that invitation was accepted
Authenticator keyAccount → Security → two-step verification → Copy key (base32 or otpauth:// link)
Auto re-loginOn by default
No VPN, no SNMP, no agent. If SmartTile also has a network path to the site, each device is pinged as a second opinion.
SmartChoice · SmartTile DeviceAutomate™ — HPE Aruba Instant OnPage 1 of 2
SMARTTILE · DEVICEAUTOMATE™ · HPE ARUBA INSTANT ON — EXACTLY WHAT SMARTTILE ASKS INSTANT ON, AND HOW IT IS KEPT SAFE

Exactly what SmartTile asks the Instant On cloud

POSTsso …/aio/api/v1/mfa/validate/fullsign in (answers the 2FA challenge with a generated code)
POSTsso …/as/token.oauth2PKCE code exchange and refresh — the portal's own session renewal
GET/sitesthe sites the account can see; also the Test call
GET/sites/{id}/inventoryswitches + APs: status, ports, PoE, radios, firmware
GET/sites/{id}/landingPage · /alertsSummarysite health, client counts, 24 h traffic
GET/sites/{id}/alertsthe portal's alert feed
GET/sites/{id}/clientSummarywired + wireless clients
GET/sites/{id}/networksSummarySSIDs
GET/sites/{id}/administration · /timezone · /maintenanceportal accounts, time zone, maintenance window (nightly)

Security and control

Reads only, 2FA stays on

Every Instant On API call is a GET. SmartTile never turns two-step verification off; it generates the 6-digit code from the stored key only when HPE asks for one.

Two factors, two keys

Password and authenticator key are encrypted AES-256-GCM — the key under a separate encryption key — each bound to your tenant. Neither is ever returned by the API or shown again.

Never locks the account

If sign-in fails (bad password, key rejected, locked, HPE changed the sign-in) the account shows connection broken, your admins are e-mailed once, and retries back off from 5 minutes to 6 hours.

Your company, with switches

Every request is scoped to your organization; changes need an admin. Each account has Active / Paused, and the integration and its 2FA support each have an on/off switch plus a server kill switch.

Common objections

ObjectionAnswer
“We will not turn two-factor off.”You do not have to. Paste the authenticator key once; SmartTile answers the code itself.
“Will SmartTile push firmware?”No. Instant On has no upgrade API. SmartTile flags an available update, and with FirmwareAutomate tickets, schedules and verifies it — the update is applied from the portal.
“HPE could change the portal.”Then the account shows connection broken with the reason, admins are e-mailed, and Run diagnostics lists every endpoint's status code (never values) for support.
One read-only portal account, 2FA left on — and every Instant On switch and AP reports down like the rest of your network.
SmartChoice · smarttile.smartchoiceus.com · (800) 217-3096, 24×7 · verified 2026-09-28Page 2 of 2