Troubleshooting - Common Issues
Common problems seen when installing or running Locai:Link, with the fastest way to confirm and resolve each one. If your issue is not listed here, contact support at support@locai.co.uk.
Install registers the device but fails at the final "connecting" step
This is the most common issue on business and office networks.
What you see
The installer gets most of the way through, then stops with an error like this:
Zenoh Connection Failed: Unable to connect to any of [tls/zenoh.locai.co.uk:7448]! at ...orchestrator.rs:386.
Installation step failed (Exit Code: 1)
The orchestrator.rs:386 part is an internal reference from inside the software and can be ignored. The line that matters is "Unable to connect to any of [tls/zenoh.locai.co.uk:7448]".
What is actually happening
Your device registered successfully. Registration happens over HTTPS on port 443, which almost every network allows.
The install only stops at the next step, where the agent opens its data connection to the Locai network. That connection uses port 7448, which many firewalls, proxies, and security products block by default because it is a less common port. Nothing is wrong with your device or the software: the connection is simply being blocked before it can leave your network.
Confirm it in 10 seconds
Run the matching command for your system. A result of success / True means the port is open; a failure / False means it is being blocked.
Windows (PowerShell):
Test-NetConnection -ComputerName zenoh.locai.co.uk -Port 7448
Look at the last line: TcpTestSucceeded : True means open, False means blocked.
Linux / macOS:
nc -zv zenoh.locai.co.uk 7448
succeeded! means open; Connection refused or a hang / timeout means blocked.
A telltale sign of this issue: PingSucceeded : True but TcpTestSucceeded : False. That means the machine can reach the server, but the specific port is closed.
How to fix it
Try these in order and re-check after each one using the command above. Stop as soon as it shows open.
1. Test on a different network. Connect the machine to another internet connection for a moment (for example a mobile phone hotspot) and run the installer again. If it works there, your usual network is doing the blocking, and one of the steps below (or your network administrator) will open it.
2. Check your antivirus or internet-security software. Products such as Norton, McAfee, Bitdefender, Kaspersky, and Avast include their own firewalls. Open the product, find its Firewall / Network / Protection section, and allow outbound TCP port 7448 (see Network requirements below). Temporarily pausing the protection is a quick way to confirm whether it is the cause.
3. Allow it through your device's firewall. Most Linux and macOS systems allow outbound connections by default, so this step mainly applies to Windows and to any machine running a custom or third-party firewall. Follow the section for your operating system.
Windows. Open PowerShell as administrator (right-click Start, choose Windows PowerShell (Admin) or Terminal (Admin)), then run:
New-NetFirewallRule -DisplayName "Allow Loc.ai Link" -Direction Outbound -Action Allow -Protocol TCP -RemotePort 7448
Linux. Only needed if your device restricts outbound traffic. If you use ufw (common on Debian, Ubuntu, and Raspberry Pi OS):
sudo ufw allow out 7448/tcp
If you use raw iptables instead:
sudo iptables -A OUTPUT -p tcp --dport 7448 -j ACCEPT
After changing iptables rules directly, remember to persist them (for example with iptables-save) so they survive a reboot.
macOS. The built-in macOS firewall only filters incoming connections, so it will not block this. If you have installed a third-party outbound firewall such as Little Snitch or LuLu, open it and allow the outbound connection to zenoh.locai.co.uk on port 7448.
4. Ask your network administrator (office / shared networks). If the machine is on a company or shared network, the block is usually on the router or gateway and cannot be changed on the device itself. Send whoever manages the network the Network requirements below and ask them to allow the outbound connection.
Once the check shows the port is open, run the installer again. It will pick up from where it left off and connect straight away.
Network requirements
Locai:Link needs the following outbound connections. Both use standard, encrypted TLS. Allow them by hostname where possible, as the underlying IP addresses can change over time.
| Purpose | Address | Port | Protocol |
|---|---|---|---|
| Control plane (registration, telemetry, OTA updates) | api.locai.co.uk | 443 | TCP (HTTPS) |
| Data plane (device connectivity) | zenoh.locai.co.uk | 7448 | TCP (TLS) |
Port 443 is open on almost all networks, so registration usually succeeds even where port 7448 is blocked. If a device registers but will not connect, port 7448 is the one to check first.