Connect to your plants' networks with your own VPN certificate

You can now reach the networks of the plants you have access to. Your profile page has a new "VPN" tab; choose "Issue cert" to download a WireGuard configuration. "Reachable subnets" lists what you can reach. "Recent connections" shows when your tunnel was last used.

• You get your configuration only once, on issue and on rotation. Save it before closing the page.
• When two plants offer the same subnet, you pick which plant it reaches; the others stay attached but inactive.
• You do nothing to add a subnet. It becomes reachable once the plant's on-site agent can serve it.
• "Rotate cert" issues a new key and disconnects your current tunnel. "Revoke cert" removes your certificate and connection history.