Configure Client for a specific Program
These guides assume you already have the WARP Client installed, if you haven't please go to: Warp Client Install
Configuration
macOS
- Go to account preferences in the client.
- Fill in the team domain:
Note: If you do not know the team domain please contact support.
- Login to the WARP authentication website (pops-up automatically). Use your whitelisted e-mail address.
Note: Please use the same email you registered with HackerOne.
- Authentication succesfull, register client into program
Click the "Open Cloudflare WARP" button
- Client changed
The client should now display "Zero Trust" instead of "WARP"
Windows
- Go to account preferences in the client.
Click "account" tab
- Fill in the team domain:
Note: If you do not know the team domain please contact support.
- Login to the WARP authentication website (pops-up automatically). Use your whitelisted e-mail address.
Note: Please use the same email you registered with HackerOne.
- Authentication succesfull, register client into program
Click the "Open Cloudflare WARP" button
- Client changed
The client should now display "Zero Trust" instead of "WARP"
Linux
- To connect for the very first time you must register first warp in your system. Register the client
warp-cli register
Note: (Repeat in case of API error)
- Convert WARP to Zero Trust, by logging into the team domain
warp-cli teams-enroll [team-domain]
Note: If you do not know the team domain please contact support.
- Navigate to the domain page, add your whitelisted e-mail address, get the one-pin and connect
A browser window should open at the following URL:
https://[team-domain].cloudflareaccess.com/warp
If the browser fails to open, please visit the URL above directly in your browser.
Note: Please use the same email you registered with HackerOne.
3a. CLI only login Alternatively if you have CLI only access you can:
warp-cli teams-enroll [team-domain]
After this open the URL listed in the output on you local machine, or via terminal based browser.
Then within 30 seconds of authenticating. Copy the token and use it in terminal:
warp-cli teams-enroll-token com.cloudflare.warp://[team-domain].cloudflareaccess.com/auth?token=[token]
If the timer runs out before you enter the token you will get the following error:
Error: Invalid JWT provided.
- Connect the WARP Client
warp-cli connect
warp-cli status -> Must show "Status update: Connected"
warp-cli account -> will show if connecting to account was successful
Troubleshooting
Split tunnel policy
It is possible to check the split-tunnel policy from the client.
In Settings go to Advanced
Click on the button Split Tunnel
The same is possible from the command-line:
warp-cli settings
Which will return something like
$ warp-cli settings
Merged configuration:
Always On: true
Switch Locked: false
Mode: WarpWithDnsOverHttps
Cloudflare for Families: Off
Disabled for Wifi: false
Disabled for Ethernet: false
Gateway Id: [gateway_id]
Onboarding: true
Include mode, with hosts/ips:
ifconfig.me
Fallback domains:
home.arpa
...