--- title: "Manage edge devices centrally — logiccloud ORCHESTRATE" description: "With logiccloud ORCHESTRATE you deploy applications centrally, keep devices up to date and control access – on edge devices, in Kubernetes and the cloud." url: https://logiccloud.com/en/products/orchestrate/ language: en-GB --- logiccloud ORCHESTRATE # Your edge ecosystem. Less effort. More security. Deploy applications centrally. Keep devices up to date. Control access precisely. [Request a demo](https://logiccloud.com/en/demo/) [See the architecture](https://logiccloud.com/en/products/orchestrate/#architecture) **DEPLOY** provide **UPDATE** keep current **MONITOR** know the state --- Target systems - Kubernetes - Docker - Podman The starting point ## What works easily with a few devices becomes a challenge with many devices across sites. With every new machine, the number of applications, devices and software versions grows. What still works easily at one site becomes a daily challenge across many: - Onboarding devices - Installing software - Granting access rights - Rolling out updates - Accessing systems for service logiccloud ORCHESTRATE brings these tasks together in one central platform. So your team spends less time on individual installations, handles service cases faster and looks after your systems traceably across their whole lifecycle. With every machine ## Repository, devices and infrastructure in one platform. Applications from the central repository, device management and secured web access to all connected devices come together in ORCHESTRATE and reach edge devices with Docker or Podman just as they reach Kubernetes in the data centre, in the private or the public cloud. ![Architecture diagram: logiccloud ORCHESTRATE in the middle. On the left, device management (security patch, config) and the shop repository with Mosquitto, Node-RED, Grafana, InfluxDB, Telegraf, logiccloud CONTROL, CODESYS, Customer App, TwinCAT and zenon. At the top, three secured web accesses for desktop, tablet and smartphone. At the bottom, the target systems: Kubernetes (data centre, private and public cloud) with agents, Docker and Podman on edge devices with device agents. Margo logo bottom right.](https://logiccloud.com/_astro/orchestrate-architecture.j3bBBGWR_Znpbq3.webp) ## Operate 01 **Onboarding ### Start simply. Onboard devices securely. A simple, secured onboarding process makes it easy to add new devices to your edge ecosystem. Devices are assigned unambiguously and brought under central management in a controlled way. That cuts manual set-up steps and lays the groundwork for secure deployment, monitoring and maintenance from the start. So you get from the first connection to productive operation faster. From device to operation 1. 1Connect 2. 2Assign uniquely 3. 3Onboard under control 4. 4Productive 02 **Deployment ### Your applications. On the right infrastructure. Automation, visualisation, data processing or your own customer application: deploy the software you need from a central repository and distribute it to your target systems. Combine logiccloud CONTROL with other applications such as Node-RED, Mosquitto, Grafana or InfluxDB. ORCHESTRATE brings together deployment on edge devices with Docker or Podman and in Kubernetes environments in the data centre, the private cloud or the public cloud. So you use one management approach for different applications and infrastructures, and put your solutions together to fit your customers' requirements. Shop · Repository - logiccloud CONTROL - Node-RED - Mosquitto - Grafana - InfluxDB - Telegraf - CODESYS - TwinCAT - zenon - Customer App Target systems - **KUBERNETES** Data centre · private · public cloud - **DOCKER** Edge device - **PODMAN** Edge device 03 **Updates & patches ### Update centrally. Cut down on repetitive work. New features, changed configurations and security patches are part of every installation's lifecycle. With ORCHESTRATE you organise these tasks centrally and reduce manual work on individual devices. That simplifies looking after your systems, gives you traceable software versions and makes supporting growing installations easier to plan. Proven software combinations can be deployed again and again and updated selectively. Software versions*Example view* | Device | Application | Status | | ------------------ | ------------------ | -------------- | | Line 1 · Edge | logiccloud CONTROL | current | | Line 2 · Edge | Node-RED | update planned | | Plant South · K8s | Grafana | current | | Plant North · Edge | Security patch | update planned | 04 ****Monitoring & service ### Know the state. Act faster when service is needed. Status and telemetry data show how your applications and devices are working. Through secured web access your team reaches the connected operating and service interfaces: on desktop, tablet or smartphone. Your experts can narrow problems down remotely and respond more precisely. That shortens troubleshooting, saves travel and can reduce on-site visits. Status & telemetry*Example view* CPU Memory Connection Secured web access - Desktop - Tablet - Smartphone ## Secure A User management ### Granular user management. The right permissions for every task. Development, operations and service need different access rights. With granular user management you decide precisely who may see or use which devices, applications and functions. So you give employees, customers and external service partners the access their task requires. Responsibilities stay clear, sensitive functions stay protected, and working across company boundaries stays under control. Rights by role*Example* | Role | Devices | Applications | Web access | | --------------- | ------- | ------------ | ---------- | | Development | view | manage | use | | Operations | manage | use | use | | Service partner | view | view | use | | Customer | view | — | use | B Identity & authorisation ### The highest security for access. Verify identities. Enforce permissions. With the MARGO Identity and Authorization Framework (MIAF), logiccloud ORCHESTRATE relies on unambiguous identities and targeted authorisation. Only authenticated and authorised users and services get access to the resources released to them. Together with secured onboarding and granular user management, this gives you controlled access to your edge ecosystem: from onboarding new devices to everyday remote access. Every request passes through 1. IdentityUser or service 2. AuthenticationWho is it? 3. AuthorisationWhat is allowed? 4. AccessReleased resource margo Identity and Authorization Framework (MIAF) C CRA audit trail ### Prove security. Prepare audits more easily. Which software version was installed when? Who changed a configuration? When was a security patch applied? The CRA audit trail in logiccloud ORCHESTRATE records security-relevant access, changes, deployments and updates traceably. So you keep the history of your applications and devices in view and support your evidence under the Cyber Resilience Act. That reduces the effort of preparing audits and gives you transparency across the whole lifecycle of your systems. Audit trail*Example entries* - 08:14 PATCH Security patch applied on Plant North · Edge - 09:02 CONFIG Node-RED configuration changed by Operations - 10:37 DEPLOY logiccloud CONTROL deployed on Line 2 - 11:20 ACCESS Service partner web access to HMI Line 1 AI agent · logiccloud agent-kit MCP Request Pump P2 should shut down after 5 s of dry running. Please implement and roll out to plant North. Reading project “Pump station” via logiccloud-control … Main.st: function block FB_DryRun added (TON, 5 s) HMI page “Pumps”: alarm “Dry run P2” added Cloud build: succeeded, 0 errors Change waiting for your approval Main.st · IEC 61131-3 1 FUNCTION_BLOCK FB_DryRun 2 VAR_INPUT xRunning : BOOL ; xFlow : BOOL ; END_VAR 3 VAR_OUTPUT xShutdown : BOOL ; END_VAR 4 VAR tDelay : TON ; END_VAR 5 tDelay(IN := xRunning AND NOT xFlow, PT := T#5s ); 6 xShutdown := tDelay.Q; // alarm to the HMI 7 END_FUNCTION_BLOCK Rollout · canary · plant North Device Hardware Version Status PS-North-01 WAGO CC100 1.4.1 1.4.2 running updated PS-North-02 ctrlX CORE 1.4.1 1.4.2 waiting updated PS-North-03 Phoenix EPC 1.4.1 1.4.2 waiting updated PS-North-04 Raspberry Pi 1.4.1 1.4.2 waiting updated Batch approved (admin) · recorded in the audit log Illustrative example — names and values are made up. logiccloud agent-kit ## Rollouts by AI agent, too Through the agent-kit, the AI agent of your choice drives rollouts in ORCHESTRATE: show a dry run, roll out in stages, pause, resume or stop. Batch approvals stay with admins. [AI agents with logiccloud](https://logiccloud.com/en/products/ai-agents/) ![Logo of the open standard Margo, margo.org](https://logiccloud.com/_astro/margo-logo.DnZvJZyL_Zuk3Pg.webp) Margo ## Built on the open Margo specification. Margo, an initiative under the Linux Foundation, defines a common management interface for industrial edge systems. logiccloud is a member of the initiative. ORCHESTRATE implements the Margo Workload Management API — without adding extensions of its own. The specification is not final yet: preview releases have appeared since December 2025, and general availability is expected in 2027. We keep ORCHESTRATE current with every release. - More choice of edge hardware and infrastructure - Faster integration of Margo-compatible devices once they exist - Reusable applications and operating processes - Fewer proprietary dependencies and long-term investment protection Margo creates the common language. ORCHESTRATE turns it into controlled, verifiable operation. Scale ## Grow with your business. New customers and additional sites are meant to grow your business. With ORCHESTRATE you lay the groundwork to onboard devices securely, deploy proven solutions again and again, and look after your edge ecosystem centrally. - ### Machine builders Simpler service. - ### Operators A better overview of applications and devices. - ### Integrators A repeatable path from the first installation to operation across sites. ## Onboard securely. Operate simply. Grow under control. See how you deploy, update and securely look after your applications and devices centrally. [Request a demo](https://logiccloud.com/en/demo/) [Go to the architecture](https://logiccloud.com/en/products/orchestrate/#architecture)