The auth key is used at enrollment. Telnyx stores it encrypted until then and never returns it. A router stays on the tailnet it enrolled in. To join another tailnet, create a new router.
device_id, tailnet_name, and tailscale_ips record the enrollment. The router also appears in the Network’s interface list.
Deleting a router logs its machine out of the tailnet. The machine stays listed, expired, until the admin removes it.
For the Tailnet Admin
- Use a pre-approved, tagged auth key. A key that is expired, revoked, or already used fails enrollment.
- A tagged machine has key expiry disabled by default. An untagged router stops working when its key expires, unless the admin disables key expiry.
- Remove a deleted router’s machine with Remove in the machine’s menu.