Qeedji TAB10s Android 10 Inch Tablet User Manual

Device configuration by USB
Prerequisite: the TAB10s device needs to have a suitable power supply equipment allowing to support TAB10s device configuration by the USB-C connector.
Copy the configuration script at the root directory of an USB storage device and insert it on the USB-C connector of the TAB10s device (or on the third party equipment connected to the USB-C connector). This message is displayed for only few seconds.
This message is displayed until the USB storage device is unplugged.
When the USB storage device is unplugged this message is displayed for less than 5 seconds.
40

This message is then displayed until the device is rebooting automatically once. 41

Device configuration by WebDAV
Prerequisite: a WebDAV client (CarotDAV or BitKinex for example) is installed on your computer or the TAB10s is mounted as a disk on the MS-Windows explorer. For further information, refer to the chapter § Device network disk mounting in MSWindows explorer. The default credentials values, put at factory, for all the connection profiles are: admin / admin . The port value put at factory to access to WebDAV directory is: 80 . The port value can be modified by using a configuration script.
https:// scheme to access to the TAB10s is not yet supported. Copy the configuration script in the .configuration/ directory located at the root of the TAB10s WebDAV server. This message is displayed for only few seconds.
Then this message is displayed for less than 5 seconds.
42

This message is then displayed until the device is rebooting automatically once. Once the configuration script is installed, the .js file is removed.
43

Device configuration by server TFTP and server DHCP with code 66
The TAB10s device can be configured thanks to a configuration script hosted on a TFTP server + DHCP server (code 66). Prerequisites:
the LAN or the WLAN interface is configured in DHCP mode, a TFTP server and a DHCP server are properly configured, are working properly and are available on the network. For further information, refer to the chapter § TFTP and DHCP server configuration, the Javascript configuration script is available in the exported directory of the TFTP server , a new configuration script is taken into account by the device only when a modification has been done and only after a device restart. At each device boot-up, the JavaScript configuration script is downloaded from the TFTP server. The script is then executed once only if it has never been downloaded before or if the configuration script has been modified since the last reboot. The message should be displayed showing the IP address of your TFTP server.
Then you should see the same messages as the chapter § Device configuration by USB (after the USB storage device is unplugged).
44

Error messages when following the previous procedures
This error message is displayed for ten seconds when the copy of the script from the USB storage device has failed. If the proble persists, try again with another USB storage device.
This error message is displayed for ten seconds when the configuration script contains a Javascript syntax error. Double check that the configuration script content is consistent for the TAB10s device.
45

2.1.4 Hardware reset
In case your APK or the AQS would not respond anymore, you can proceed to a TAB10s hardware reset: insert for example a paper clip inside the System button hole until feeling the button, hold the System button pressed for more than 5 seconds, release the System button by removing the paper clip.
1
1 System button.
46

2.2 Factory recovery
The factory recovery consists in recovering the OS and data like it was at the factory. Consequently, the different APK installed by the user and the TAB10s device configuration data will be lost. So, it is highly recommended to save all the required settings to be able to reconfigure your TAB10s device afterwards. Before proceeding to the recovery, if it is still possible, save the safe partition: user data and APK.
Micro SD card removal
Procedure: In case the device is hung on the wall on a mounting bracket:
with a screw driver, untighten the two screws at the bottom of the TAB10s, remove the device from the mounting bracket. In case the device is powered by the USB-C connector: unplug the USB-C power supply, with a screw driver, untighten the two screws at the bottom of the TAB10s, remove the mounting bracket from the product. With a little pen, push on the micro SD card and let the spring eject it from the micro SD connector. The micro SD has to eject itself totally from its connector as soon as your pen is removed. If not, start again by pushing again the micro SD card with you pen, and when the spring is responding sufficiently, remove you pen rapidly.
Micro SD card burning
Download the aosp-tab10-setup-xx.yy.zz.iso file for the factory recovery from the Qeedji Website (~ 16 GB). The download time will depending on the network connection quality.
Insert the micro SD card in a plastic SD card adapter (31 x 24 x 2.1 mm) and insert it in the approriate SD card slot, supported by any recent computer. In case Windows is showing a message inviting to format the SD card, choose No .
The ISO version suitable for your device, for example aosp-tab10-setup- xx.yy.zz.iso , can be burnt on your micro SD card by any ISO image burning software.
However Qeedji recommends to use the BalenaEtcher software (version V1.5.102, for example). For further information about the procedure with BalenaEtcher software, refer to the chapter § ISO image burning with BalenaEtcher.
Micro SD card installation
Once the micro SD card content has been updated: remove the SD card adapter from your computer, remove the micro SD card from the SD card adapter, insert back the micro SD card inside the micro SD connector of the TAB10s device, in the right sense, and push it until hearing a clic. For further installation, refer to the chapter § Connectors pin-out.
When the micro SD card is installed properly, the SD card should be not visible.
47

In case the device has to be hung on the wall with a mounting bracket: hang again the product on the mounting bracket, with a screw driver, tighten the two screws at the bottom of the TAB10s device to lock the device on the wall.
In case the device is powered by the USB-C connector: install again the mounting bracket on the product, plug again the USB-C power supply.
48

Part III

Applicative user interface

49

3.1 Applicative user interface
The TAB10s device supports a Web user interface that can be accessed with a Web browser. The supported Web browsers are: Google Chrome , Mozilla Firefox , MS-Edge (Chromium) . It is available from the URL: http:/// . The defaut credentials values put at factory for the Administration user connection profile are:
identifier: admin , password: admin . The URL falls automatically into the applicative user interface: http:///#/ . This pane allows to watch the App content: This is an example of content when the TAB10s device is supplied by a standard USB-C wall-plug and connected to a WIFI network.
This is an example of content when the TAB10s device is supplied by a NAPOE109ku Ethernet adapter which is connected to a PoE switch.
50

Part IV

Administration console user interface

51

4.1 device configuration Web user interface
The TAB10s device supports a device configuration Web user interface that can be accessed with a Web browser. The supported Web browsers are: Google Chrome , Mozilla Firefox and MS-Edge (Chromium) . It is available from the URL: http:/// . The default credentials values of the Administration user connection profile are:
identifier: admin , password: admin . The URL falls automatically into the applicative user interface¹. At the top right corner, click on the Administration button. ¹ For further information, refer to the chapter § Applicative user interface. This is the device configuration Web user interface.
1 2
After you have changed and saved all your settings in the different panes, be sure to perform a device restart by clicking on the Reboot the
device 2 button so that your changes are fully reflected.
The Web user interface and the WebDAV server are not accessible in https.
Click on the device logo 1 at the left top corner to return to the applicative user interface.
52

4.1.1 Configuration > Administrator
In the Configuration tab, select the Administrator menu to: change the Device name , view the Hostname value which is automatically generated from the device name by limiting it to 15 characters max and keeping only its alpha numeric character, the dot ( . ) characters and the dash ( – ) characters. The check box before the Force a hostname label allows to force the device to have a Hostname value set by the user. The Hostname value is the device identification name communicated during a network UPnP discovery.
You can add also some private credentials values, with its identifier/password by using the button of the Credentials Then associate your private credentials values to the different connection profiles :
Administration user : the access rights of this connection profile allow to: access to the device configuration Web user interface and make modifications, use the Web Services supported by the device, publish on the WebDAV server directories of the device (Apps, configuration scripts, firmwares and APKs),
Application web service : the access rights of this connection profile allow to use only the additional Web Services supported by the App (ex: odata demo APK), Administration web service : the access rights of this connection profile allow to publish on the WebDAV server directories of the device (Apps, configuration scripts, firmwares and APKs), Publishing software : the access rights of this connection profile give allow to publish on the WebDAV server directories of the device (Apps, configuration scripts, firmwares and APKs), Application user : the access rights of this connection profile allow to:
access to the device configuration Web user interface in Read Only ¹ and to the applicative Web interface in Read/Write. ¹ Out of the applicative Web page, when some modification attempts are done in one of the device configuration Web page, the user is disconnected from the device configuration Web user interface.
The default credential label for all connection profiles is Admin , corresponding to the default identifier/password admin / admin .
In case you have lost the credentials values of all the Administration user connection profiles, the only way to restore some known
credentials is to inject an USB-C mass storage having an appropriate configuration script through the USB-C connector (USB 1 or USB 2) of the TAB10s device. For further information, refer to the chapter § Device configuration by script.
It is recommended that you enter one unique Hostname value for each device. In case several TAB10s devices are located in different buildings or geographical locations, we recommend that you enter hostname values with information about the building and the location (e.g. Hall-RDParis-1 ). For security reasons, it may be useful to change the credentials value for the Administration user profile. Please keep these login credentials in a safe place afterwards.
53

This is an example with different credentials for the four connection profiles.
The association of the credentials to the connection profiles are taken into account only after a device reboot. In case the user takes more than 5 minutes to create the credentials, associate them to the profile and reboot, the user may have to reauthenticate (with the credentials not modified).
54

4.1.2 Configuration > LAN_1
In the Configuration tab, select the LAN_1 menu to set up the network configuration of the LAN_1 interface of your device. The LAN_1 menu may not be available when the TAB10s device is connected to a WIFI network and supplied by a standard USB-C wall plug.
The device supports the UPnP and can be for example detected automatically in the local network environment of your computer. By default, the device is configured with DHCP activated. Choose whether the IP address is static or given by the DHCP server. If static, fill the suitable parameters like subnet mask , gateway and DNS .
The LAN_1 configuration is modified dynamically without rebooting after having pressed on the Validate button. If the IP address is
changing after having pressed on the Validate button, you need to reconnect to the device configuration Web user interface with the new LAN_1 device IPV4 address or with the LAN_1 device IPV6 address. The connection from a computer to the device configuration Web user interface with the device IPV6 address, computed from the device LAN_1 MAC address value, is supported. To connect to the IPV6 address of the LAN_1 interface, ensure that the WLAN_1 connection is down. For example, if the LAN_1 MAC address of the device is 00-1c-e6-02-27-bf, type the URL http://[fe80::21c:e6ff:fe02:27bf]/ or type http://[fc00::21c:e6ff:fe02:27bf]/ in a Web browser. The routable prefix (fc00, fe80, and so on…) are depending on your network configuration. Your computer must be configured properly to support the IPV6 protocol. To use a specific proxy server , select the Manual proxy configuration in the Proxy servers drop down list then enter your proxy configuration.
55

To use an automatic proxy server configuration, select the Automatic proxy configuration in the Proxy server drop down list then enter the PAC file URL allowing to get automaticall the proxy server configuration. For example: https://domain.contoso.en/dir/my-proxy-auto-conf.pac
The LAN_1 configuration is dynamically taking into account the new LAN_1 parameter as soon as the user changes from IP address
allocated by DHCP to static IP address or changes the static IP address value then click on the Validate button of the device configuration Web user interface.
The devices uses only one network interface at a time. The WLAN_1 has priority over LAN_1 . In DHCP mode, if neither the LAN_1 connectivity nor the WLAN_1 connectivity is working or the WLAN_1 interface is deactivated, the IP
address value is unavailable. In some case, a valid IP address can be got back few dozens of seconds after the network connectivity is restored on WLAN_1 interface or on LAN_1 interface. Procedure to configure the LAN_1 interface with the configuration Web user interface when your network supports DHCP:
. it is considered here that the network connectivity is OK over the LAN_1 interface, . connect to the device configuration Web user interface with a Web browser with the DHCP IP address of the LAN_1 interface. You can
still connect to the device configuration Web user interface with its LAN_1 IPV6 address (for example http://[fe80::21c:e6ff:fe02:5694] get from the MAC value written at the back of the NAPOE109XX device). Procedure to configure the LAN_1 interface with the configuration Web user interface when your network does not support DHCP: . it is considered here that the TAB10s device is connected to a NAPOE109ku device or to a NAPOE109kt, or to a NAPOE109ft device which is connected to a PoE switch, . disconnect the RJ45 cable (cable1 for network1) from your computer, . connect a RJ45 cable (cable2 for network2) between your computer and the PoE switch, . connect to the device configuration Web user interface with a Web browser with its LAN_1 IPV6 address (for example http://[fe80::21c:e6ff:fe02:5694] get from the MAC value written at the back of the NAPOE109XX device), . deactivate IP address get by DHCP for LAN_1 and enter a suitable static address configuration (IP address, subnet mask, gateway, DNS), . reboot the device with the device configuration Web user interface, . disconnect the RJ45 cable (cable2 for network2) from your computer and reconnect the previous RJ45 cable (cable1 for network1), . connect to the device configuration Web user interface with a Web browser with the valid LAN_1 IP address of the device. You can still connect to the device configuration Web user interface with its LAN_1 IPV6 address (for example http://[fe80::21c:e6ff:fe02:5694] get from the MAC value written at the back of the NAPOE109XX device).
56

To activate 802.1X security on LAN_1 interface, set the Security field to 802.1X instead of None. Choose one EAP method among PWD, MD5, GTC, PEAP, TLS, TTLS. The chosen EAP method must be supported by your RADIUS server.
In the context of a secure network, your device must be first declared in your dedicated RADIUS server with a identity / password . For further information, please contact your IT department.
57

When required, fill the Identity / password declared for your device in your RADIUS server. When displayed, the Anonymous identity field value is optional.
Required only by the PEAP or TTLS EAP methods , choose then among the Phase 2 authentication mode supported by your RADIUS server: NONE, PAP, MSCHAP, MSCHAPV2, CHAP, GTC, MD5, EAPMSCHAPV2. The TLS EAP methods and TLS Phase 2 authentication allows to provide a 802.1X user certificate installed in your TAB10s device when required by your RADIUS server configuration. The TLS, TTLS, and PEAP EAP methods allow to activate the 802.1X CA certificate validation. The 802.1X CA certificate must be installed first in your TAB10s device. For further information about certificates installation, refer to the chapter § Certificates.
The 802.1X CA certificate is the certificate with the highest autority for your RADIUS server. For further information, please contact your IT department. In this AQS version, it is not possible to select the Use system certificates value for the Validation of the 802.1X CA certificate input for LAN_1 interface. When using 802.1X certificates, in case your device is not on time or when the 802.1X certificates expiration date has expired, the device is not able to access to the network anymore. To work around, you have to insert one USB stick containing a suitable configuration script to install an appropriate certificate or to update the device date and time. A new negociation with the RADIUS server with the programmed LAN_1 802.1X security is required as soon as a down/up event is detected at the input of the port of the 802.1X router, meaning when a RJ45 cable is unplugged or when the device is restarting. If intermediate network devices are present between the device and the 802.1X router, the 802.1X router may not detect down/up event and may keep a previous negociation alive if one has been successful just before.
58

4.1.3 Configuration > WLAN_1
In the Configuration tab, select the WLAN_1 menu to set up the network configuration of the WLAN_1 interface on your device.
As soon as the WLAN_1 configuration is deactivated through the device configuration Web user interface, or if the WLAN_1 interface is not properly
configured, the network connection with the device is lost. The only way to connect to it again is to create again a WLAN_1 connection again with Android settings or to inject, with an USB-A storage device and a USB-A to USB-C hub, a configuration script having a suitable WLAN_1 configuration.
After having removed a registered WLAN_1 network, the removal is effective as soon as the user clicks on the Validate button. If there is no other
valid registered WLAN_1 network, the only way to connect to the device again is to connect a RJ45 Ethernet cable or to inject, with an USB-C storage device, a configuration script having a suitable WLAN_1 configuration.
The devices uses only one network interface at a time. The WLAN_1 has priority over LAN_1 . In DHCP mode, if neither the LAN_1 connectivity nor the WLAN_1 connectivity is working or the WLAN_1 interface is deactivated, the IP address
value is unavailable. In some case, a valid IP address can be got back few dozens of seconds after the network connectivity is restored on WLAN_1 interface or on LAN_1 interface.
The connection from a computer to the device configuration Web user interface with the device IPV6 address, computed from the device WLAN_1 MAC address value, is supported. To connect to the IPV6 address of the WLAN_1 interface, the LAN_1 connection must be down. For example, if the WLAN_1 MAC address of the device is 00-1c-e6-02-27-bf, type the URL http://[fe80::21c:e6ff:fe02:27bf]/ or http://[fc00::21c:e6ff:fe02:27bf]/ in a Web browser. The routable prefix (fc00, fe80, and so on…) is depending on your IPV6 network configuration. Your computer must be configured properly to support the IPV6 protocol.
Procedure to configure the WLAN_1 interface with the configuration Web user interface when your network supports DHCP:
. it is considered here that the network connectivity is OK over the LAN_1 interface,
. connect to the device configuration Web user interface with a Web browser:
. add a valid WLAN_1 configuration (SSID, authentication, crypto key),
. reboot the device with the device configuration Web user interface.
. connect to the device configuration Web user interface with a Web browser with the valid WLAN_1 IP address of the device. If the WIFI connection is done, you can connect to the device configuration Web user interface also now with its WLAN_1 IPV6 address (for example http://[fe80::21c:e6ff:fe02:62e3] get from the MAC.WLAN1 value written at the back of the device).
Procedure to configure the WLAN_1 interface with the configuration Web user interface when your network does not support DHCP:
. it is considered here that the TAB10s device is connected to a NAPOE109ku device, a NAPOE109kt, or a NAPOE109ft device which is connected to a PoE switch,
. disconnect the RJ45 cable (cable1 for network1) from your computer,
. connect a RJ45 cable (cable2 for network2) between your computer and the PoE switch,
. connect to the device configuration Web user interface with a Web browser with its LAN_1 IPV6 address (for example http://[fe80::21c:e6ff:fe02:5694] get from the MAC value written at the back of the NAPOE109XX device),
. deactivate IP address get by DHCP for WLAN_1 and enter a valid static address configuration (IP address, subnet mask, gateway, DNS),
. add a valid WLAN_1 configuration (SSID, authentication, crypto key),
. reboot the device with the device configuration Web user interface,
. disconnect the RJ45 cable (cable2 for network2) from your computer and reconnect the previous RJ45 cable (cable1 for network1),
. connect to the device configuration Web user interface with a Web browser with the valid WLAN_1 IP address of the device. If the WIFI connection is done, you can connect to the device configuration Web user interface also now with its WLAN_1 IPV6 address (for example http://[fe80::21c:e6ff:fe02:62e3] get from the MAC.WLAN1 value written at the back of the device).
Procedure to configure the WLAN_1 interface with a configuration script:
. inject a USB storage device having a suitable configuration script on the USB hub connected to the USB-C connector of the TAB10s. And wait device reboot.
. connect to the device configuration Web user interface with a Web browser with the valid WLAN_1 IP address of the device. If the WIFI connection is done, you can connect to the device configuration Web user interface also now with its WLAN_1 IPV6 address (for example http://[fe80::21c:e6ff:fe02:62e3] get from the MAC.WLAN1 value written at the back of the device).
Procedure to configure the WLAN_1 interface with a configuration script pushed by file transfer¹ with an USB cable between the computer and the TAB10s device (the device must be supplied properly by the computer, by the NAPOE109kt device or by the NAPOE109ft device):
. push a suitable configuration script on the .configuration directory of the device file system from a computer. And wait device reboot.
. connect to the device configuration Web user interface with a Web browser with the valid WLAN_1 IP address of the device. You can connect to the device configuration Web user interface also now with its WLAN_1 IPV6 address (for example http://[fe80::21c:e6ff:fe02:62e3] get from the MAC.WLAN1 value written at the back of the device).
¹ For further information, refer to the chapter § Appendix: File transfer from a computer.
It is also possible to configure the WLAN_1 interface directly with Android settings.
59

To detect the WIFI spots SSID , click on the Scan button. In case the SSID of your WIFI router is not broadcasted (or hidden), click on the Add button to add manually a WLAN_1 interface. Enter the wished SSID value and check the option The SSID is hidden .
Select one of the detected WIFI spots SSID and press on the Add button.
60

Choose whether the IP address is static or given by the DHCP server. If static, fill the suitable parameters like subnet mask , gateway and DNS .
To use a specific Proxy server for WLAN_1 interface, select the Manual proxy configuration in the Proxy servers drop down list then enter your proxy configuration.
61

To use an automatic Proxy server configuration for WLAN_1 interface, select the Automatic proxy configuration in the Proxy server drop down list then enter the PAC file URL allowing to get automatically the proxy server configuration. For example: https://domain.contoso.en/dir/my-proxy-auto- conf.pac
The supported securities¹ are: None, WEP, WPA-Personal (PSK), WPA2-Personal (PSK), WPA-Enterprise (EAP)², WPA2-Enterprise (EAP)².
¹ Ad hoc Wi-Fi is not supported. ² This securities requires to have a RADIUS server properly configured and to have specific WIFI router supporting WPA- Enterprise or WPA2-Enterprise .
62

Fill the required crypto keys for these securities: WEP , WPA-Personal (PSK) , WPA2-Personal (PSK) .
The allowed length for WEP crypto key is: 5 or 13 digits when using ASCII- 7bits characters, 10 or 16 digits when using hexadecimal characters.
63

The allowed length for WPA-Personal (PSK) and WPA2-Personal (PSK) crypto key is 8 to 63 digits. Only ASCII-7bits characters are allowed for the crypto key.

If the WPA encryption of your router is unknown or if the WPA encryption of your router is Auto , do rather use the default value corresponding to the automatic mode:

Pairwise key cipher

Group key cipher

CCMP (AES) TKIP

CCMP (AES) TKIP

If the WPA encryption of your router is TKIP , it is possible to use:
Pairwise key cipher
TKIP CCMP (AES) TKIP

Group key cipher
TKIP CCMP (AES) TKIP

If the WPA encryption of your router is CCMP (AES) , it is possible to use:
Pairwise key cipher
CCMP (AES) CCMP (AES) TKIP

Group key cipher
CCMP (AES) CCMP (AES) TKIP

64

In case WPA-Enterprise (EAP) and WPA2-Enterprise (EAP) security: choose one EAP method among PWD, PEAP, TLS and TTLS. The chosen EAP method must be supported by your RADIUS server, choose the Phase 2 authentication among: NONE, PAP, MSCHAP, MSCHAPV2, GTC. The chosen Phase 2 authentication must be supported by your RADIUS server and is required only for PEAP and TTLS EAP methods .
In the context of a secure network, your device must be first declared in your dedicated RADIUS server with a identity / password . For further information, please contact your IT department. When required, fill the Identity / password declared for your device in your RADIUS server. When displayed, the Anonymous identity field value is optional. The TLS EAP methods and TLS Phase 2 authentication allow to provide a 802.1X user certificate installed in your TAB10s device when required by your RADIUS server configuration. The TLS, TTLS, and PEAP EAP methods allow to activate the 802.1X CA certificate validation. The 802.1X CA certificate must be installed first in your TAB10s device. For further information about certificates installation, refer to the chapter § Certificates. The 802.1X CA certificate is the certificate with the highest autority for your RADIUS server. For further information, please contact your IT department. The Domain of the 802.1X CA certificate input is diplayed only when using the Use system certificates value for the Validation of the 802.1X CA certificate input. The Domain of the 802.1X CA certificate input must not be kept empty . In case the certificate with highest authority for your RADIUS server is already embedded in the AOSP SYSTEM trusted credential, you can select the Use system certificates input value for the Validation of the 802.1X CA certificate input. In this case, during the communication with the RADIUS server, AQS checks whether the trusted certificate of the Radius is really trusted by a certificate with a higher authority embedded in the AOSP SYSTEM trusted credential basis, then checks its trustness chain. AQS checks then, in addition, that the commonName value of the Radius certificate is properly reported in the Domain of the 802.1X CA certificate input. When using 802.1X certificates, in case your device is not on time or when the 802.1X certificates expiration date has expired, the device is not able to access to the network anymore. To work around, you have to insert one USB stick containing a suitable configuration script to install an appropriate certificate or to update the device date and time.
65

4.1.4 Configuration > Output
In the Configuration tab, select the Output menu to watch the video output configuration and set the audio output configuration.
Screen resolution : 1280×800.
The rotation is not supported on the tablet. Sound card : Volume of multimedia contents bargraph: allows to tune the audio volume common to the different audio outputs (Speaker, USB-C).
If your TAB10s device is supplied by a NAPOE109kt device or a NAPOE109ft device, the device can support a Jack 3.5 audio output by plugging an USB-C to Jack 3.5″ audio adapter on the USB-C connector.
66

4.1.5 Configuration > Apps
In the Configuration tab, select the Apps menu to manage the Apps installed in the AQS operating system, whose launching at device start-up can be activated or deactivated. The Apps column of the table allows to watch the Apps installed in the AQS operating system:
the vendor Apps (App installed by default by the vendor at factory), all the Apps installed by the user. The Test card App is not displayed in this table. To deactivate the Test card App launching at device start-up, refer to the chapter § Maintenance > Test card. In this AQS version, the only vendor App is the URL launcher (V1.10.14) App .
The number of visible raws is five maximum. If more than five APK are installed, scroll the table to the bottom to watch the other raws ot the table. The Apps are sorted in the alphabetical order. The pane supports four buttons to manage the Apps :
Install the App : allows to install an APK ( .apk ) on the device from a computer, Uninstall the App ¹: allows to uninstall the APK that is selected , Restart the App button: allows to start (or restart) the APK that is selected, Stop the App button: allows to stop the APK that is selected.
67

An App can be installed by: uploading any compatible APK ( .apk ) with the Install the App button, pushing any compatible APK ( .apk ) on the .apps WebDAV directory of the device with a WebDAV client or with a third party software, using the Maintenance > Files pane of the device configuration Web user interface to upload any compatible APK ( .apk ), insert an USB-C storage device containing a compatible APK ( .apk ) on the device.
Any App newly installed is activated by default, meaning that: its associated APK pictogram is available on the AQS desktop, when the APK supports the autorestart AOSP feature, it is started automatically after the device boot- up.
68

Some Apps consist in a couple of APK (main part + UI part). This is an example when the Qeedji PowerPoint publisher for media player App is installed and properly activated:
PowerPoint Publisher (for the main part): checkbox Activated : checked,
PowerPoint Publisher UI (for the UI part): checkbox Activated : checked.
¹ In case an App is partially or entirely uninstalled, meaning removed from this table by clicking on the Uninstall the App button, the App cannot run anymore. To fix the problem, the App must be reinstalled or the App content must be published again. Then the device must reboot once.
Apps restart
Any activated APK can be started or restarted. For the Apps consisting in a couple of APK (main part + UI part), only the main part of the App can be restarted.
Apps deactivation
All the Apps supporting the autorestart AOSP feature are launched automatically after a device boot-up, but only one of them can be visually rendered on the screen. Given that the AQS operating system cannot choose, among the activated Apps , the one which must be visually rendered on the screen, and given that device resources (CPU, DDR, video decoder) are shared between the APK which are executed at the same time, it is advised to keep an only one activated APK at a time. With the table of installed Apps , it is easy, with the appropriate checkbox in the Activated column, to see the Apps that are activated and then voluntarily choose to deactivate those that are temporarily not useful for your current need. If an App is not useful at all, the best is to uninstall it with the Uninstall the App button. Some Apps consist in a couple of APK (main part + UI part). When such an App needs to be deactivated, the both parts of the App must be deactivated.
69

This is an example with the Qeedji PowerPoint publisher for media player App properly deactivated: PowerPoint Publisher (= the main part): checkbox Activated : unchecked, PowerPoint Publisher UI (= the UI part): checkbox Activated : unchecked.
If ever only the UI part of the App is not activated , and the main part of the App is kept activated , publishing the same App with the appropriate third
party software could not lead to the automatic App start. To work around, activate back the UI part APK of the App then reboot the device. This is an example with the Qeedji PowerPoint publisher for media player App not properly deactivated:
PowerPoint Publisher (= the main part): checkbox Activated : checked,
PowerPoint Publisher UI (= the UI part): checkbox Activated : unchecked.
70

Apps reactivation
After having checked back the activation checkbox for an App, click on the Reboot the device button to finalize the operation.
If ever only the UI part of the App was not activated , and the main part of the App was kept activated , activate back the UI part of the App then click on
the Reboot the device button to finalize the operation.
71

App form (optional)
Some APK can support a configuration form. To watch the configuration form for an App , select the appropriate App . If a form is supported for this App, the form of the Apps appears just below the table of installed Apps . This is an example with the URL launcher App (V1.10.13 or above) containing a form.
When the selected App does not support a configuration form, the additional This App has no configuration page information label is displayed below the table of installed Apps . Only the authentication of the HTTP RFC are supported in URL launcher, e.g. Basic and Digest .
72

4.1.6 Configuration > Servers
In the Configuration tab, select the Servers menu to define the configuration of the servers peripheral to your device. The NTP server input allows to either choose the default AQS NTP server¹ or enter your favorite NTP server domain so that the device is always on time. ¹ the default NTP server URL is time.android.com .
73

4.1.7 Configuration > Certificates
In the Configuration tab, select the Certificates menu to install: Trusted certificates, 802.1X certificates (related to the RADIUS server), VPN certificates.
Click on the button of the appropriate sections to add a certificate.
This is an example with some 802.1X certificates loaded in the TAB10s device.
In case the remote content (for example an .ics) must be read on a server available in https, but the server’s certificate is not signed, it may be required to install the server certificate both in the Trusted certificates section and in the VPN certificates sections to make the certificate trusty. When both the 802.1X CA certificate and the 802.1X user certificate are installed by a configuration script, they are regrouped under only one certificate in this pane. This certificate available in this pane can be used as well in the Validation of the 802.1X CA certificate input as in the Provision of the 802.1X user certificate input of the LAN_1 or the WLAN_1 interface. When configuring EAP method with a configuration script, some of the 802.1X certificates ( CA or/and user ) not required anymore by the chosen EAP method will be deleted by the operating system from this pane. Consequently, when 802.1X CA certificates and/or 802.1X user certificates are required again with the chosen EAP method , it is advised to reinstall them with the configuration script as well. The autosigned certificates that must be trusted must be installed both in the Trusted certificates part and in the VPN certificates part.
74

4.1.8 Configuration > Date and time
In the Configuration tab, select the Date and Time menu to check the time configuration: timezone, system date of your device (day and time).
To update the date and time of your device, click on the UTC Date and Time value and then click on the Now button. The Date an time set by the user can be taken into account only if the NTP server is not activated, or if the NTP server is not accessible. Setting a new date and time involves to restart the device immediately. If you have several configuration settings to change, it is advisable to adjust the date and time at last. It is advised that your device is on time. If your device is connected to the Internet, it is advised to synchronize the date and time on a Web NTP server. For further information, refer to the chapter § Configuration > Servers.
75

4.1.9 Configuration > Regionality
In the Configuration tab, select the Regionality menu to choose the language in which information messages or error messages related to the device need be displayed on the screen.
The supported languages are: English, Spanish, German, French, Italian, Russian.
76

4.1.10 Configuration > Variables
In the Configuration tab, select the Variables menu to set variable (or TAG) values for this device.
The variable names are: field1 , field2 , field3 , field4 , field5 .
These variable values can then be used in Apps to perform specific processing for devices having specific variables values.
77

4.1.11 Maintenance > Test card
In the Maintenance tab, select the Test card menu to enable or disable the test pattern. The test pattern is often enabled during: installing devices on the network, the configuration of the output resolution and overscan.
To activate the Test Card App launching at device start-up, set the Test card toggle button to activated. To not activate the Test Card App launching at device start-up, set the Test card toggle button to deactivated.
The test pattern content is not displayed by the TAB10s device at start-up when it is coming straight from factory. For further information about the test pattern content, refer to the chapter § Test card.
When the Test card App is launched at start-up, the other App cannot be executed. The displaying of the IP V6 address value starting with the prefix fe80:: is not supported in the Test Card content. For further information, contact your IT department so that your network is advertising the IP V6 address with another prefix (ex: fc00:: ).
78

4.1.12 Maintenance > Files
In the Maintenance tab, select the Files menu to see the directories and files hosted at the root directory of the WebDAV server.
These are the available WebDAV directories: .apps : directory allowing to upload APK and install it on the TAB10s device, .configuration : directory allowing to upload a configuration script to auto-configure the device, .data : directory hosting the App content, .software : directory allowing to upload a .fqs firmware and upgrade the AQS operating system version of the TAB10s device.
When an App is uninstalled from the device, the data related to it are not removed automatically. For disk space saving reasons, after an App uninstallation, it is recommended to remove the entire subdirectory related to the uninstalled App in the .data WebDAV directory.
Operating system upgrade
The AQS firmware can be upgraded by pushing a new firmware file aosp- tab10-setup-9.YY.ZZ.fqs in the .software directory of the device WebDAV directory ( http:///.software ).
The credentials values to access to the .software directory must be those of any connection profile except Application user one.
Configuration update
The configuration of the device can be updated also by pushing an suitable .js configuration script in the .configuration WebDAV directory ( http://<device- ip-addr>/.conf ) with the Web user interface. In this case, the file pattern must be either:
000000000000.js , configuration.js or, .js (with ab- cd-ef-ab-cd-ef, the MAC address of the device). The credentials values to access to the .configuration directory must be those of any connection profile except Application user one. Download the configuration script example from the Qeedji Website it then: edit the 000000000000.js configuration script and uncomment/modify the appropriate lines according to your needs, rename the configuration script if required, once saved, drop it in the WebDAV directory like explained above, when suitable for your device, save it preciously for future use. After a .js configuration script loading, the device is rebooting automatically once to take the new configuration into account.
79

4.1.13 Maintenance > Firmware
In the Maintenance tab, select the Firmware menu to view the version of the AQS operating system installed on your device. Drop your .fqs firmware in the Drop file here or click to add one location or click on the button Drop file here or click to add one to pick up the appropriate firmware, then click on the Send button to update the AQS (for AOSP Qeedji System ) version of your device. Wait a few minutes, the time to install the new AQS operating system version. Go back to the device configuration Web user interface and check that the AQS operating system version of the device has changed.
Corrective and evolutive maintenance software versions are regularly made available on the http://www.qeedji.tech/en/support/index.php? TAB10s/AQS_firmware_and_documentations. It is therefore advised to regularly update the AQS operating system of your device. From this website, download the latest version available for your device model.
Do not electrically disconnect the device during the firmware upgrade. For further information, refer to the chapter § Surround light
behaviour at power-up.
80

4.1.14 Maintenance > Preferences
In the Maintenance tab, select the Preferences menu to view all the preferences.
The filter allows to display only the preferences whose name contains the string entered in the filter. All the preferences have optimal default values. Double click on a preference to change its value.
81

4.1.15 Information > Device
In the Information tab, select the Device menu to view system information about the device.
Operating system : label and version of the embedded AQS operating system, Model : model of the Qeedji device, Device name : name of the device, Hostname : name of the device on the network, MAC Id : MAC address of the WLAN interface, UUID : Universal Unique IDentifier, PSN : Product Serial Number.
82

4.1.16 Information > USB adapters
In the Information tab, select the USB adapters menu to see the product name and manufacturer name of the USB adapter devices connected to the TAB10s device. This is an example of content when the TAB10s device is supplied by a standard USB-C wall-plug and connected to a WIFI network.
This is an example of content when the TAB10s device is supplied by a NAPOE109ku Ethernet adapter which is connected to a PoE switch.
83

4.1.17 Information > Network
In the Information tab, select the Network menu to view a summary of the device’s network configuration. This is an example of pane content when the TAB10s device is supplied by a standard USB-C wall-plug and connected to the WIFI network.
This is an example of pane content when the TAB10s device is supplied by a NAPOE109ku Ethernet adapter which is connected to a PoE switch, which is not connected to the network. The TAB10s device is connected to the WIFI network.
This is an example of content when the TAB10s device is supplied by a NAPOE109ku Ethernet adapter which is connected to a PoE switch, which is connected to the network.
84

The displaying of the IP V6 address value starting with the prefix fe80:: is not supported in this pane. For further information, contact your IT department so that your network is advertising the IP V6 address with another prefix (ex: fc00:: ).
85

4.1.18 Information > Screens
In the Information tab, select the Screens menu to view information about the screen.
86

Part V

Technical information

87

5.1 Technical specifications
Model TAB10s

Manufacturer Qeedji

Processors CPU

Model SoC NXP i.MX8

Information
4 ARM Core Cortex A53, up to 1.8GHz per core Integrated 2D/3D GPU 1080p60 VP9 Profile 0, 2 (10-bit) decoder, HEVC/H.265 decoder, AVC/H.264 Baseline, Main, High decoder VP8 decoder 1080p60 AVC/H.264 encoder, VP8 encoder

Screen Panel type Screen size Resolution Back light Touch screen Contrast ratio Viewing angle Brightness Display mode

Information LCD TFT, capacitive 10.1″ 16:10, 1280 x 800 px LED Multitouch 10 points max 800 (typ.) 170° in all direction Brightness: 500 nit (typ.) Transmissive, normally black

Power supply
Through POGO type connector
Through USB-C connector
Power consumption

Information
4.75 V to 5.45 V (recommended values) 4.70 V and 5.50 V as absolute minimum and maximum values
4.75 V to 5.45 V¹ (recommended values) 4.70 V to 5.50 V¹ as minimum and maximum values
6/8 W² (typical value) 10 W ³ (maximum value)
² depends on the APK running and the used peripheral. ³ the maximum current is 2.1 A, so you should select an external power supply accordingly. Qeedji recommends the NAPOE109ku , NAPOE109kt or NAPOE109ft model accessories, as it is fully qualified with TAB10s. For standard USB power supply adaptor, select a 5 V / 3 A capable device.

¹ For TAB10s devices whose the PSN is 01352-xxxxx, the power supply specification through USB-C connector is 4.75 V to 5.35 V as recommended values, 4.70 V and 5.40 V as absolute minimum and maximum values.

USB Data Through USB-C connector Through POGO type connector

Information USB 2.0 USB 2.0

Network 802.11 a/b/g/n/ac (WIFI 5)

Information
LBEH5HY1MW-230, MURATA chip 2,4 GHz and 5 GHz, built-in antenna

Storage Micro SD Card

Size 16 GB

Form factor microSD 15 x 11 x 1 mm (0.59 x 0.43 x 0.04″)

Volatile memory DDR4

Size
2 GB (~1 GB for AQS, ~1 GB for user data and APK)

88

Sensor NFC/MIFARE RFID

Information 13,56 MHz 125 KHz

Surround light

Information 3 colors: green, orange, red

Camera Sensor Inhibition Output format
Transfert rate

Information
5 Mpx
by DIP switch
RAW RGB, RGB565/555/444, CCIR656, YUV422/420, YCbCr422
QSXGA (2592 x 1944 px) @ 15 fps 1080p @ 30 fps 1280×960 @ 45 fps 720p @ 60 fps VGA 640×480 @ 90 fps QVGA (320×240) @ 120 fps

Microphones Number Inhibition

Information 2 by DIP switch

Bluetooth Bluetooth 5.0

Information 2,4 GHz, built-in antenna

Audio output Mono speaker

Information 0.7W

FAN Fanless

Operating system AQS for TAB10s

Information AQS = AOSP (Android Open Source Project) Qeedji System

Operating temperature 0 °C to +40 °C (32 °F to 104 °F)

Storage temperature -20 °C to +60 °C (-4 °F to 140 °F)

Operating humidity < 80 %

Storage humidity < 85 %

Weight 0,719 Kg (1,585 lb)

Dimensions (W x H x D) 255 mm x 178,5 mm x 10,8 mm (10,0″ x 7,0″ x 0,393”)

Plastic enclosure flame rating White material: PVC UL 94 V-0, diffusing material: PC b-S1,d0

Warranty 1 year

89

5.2 Built-in RFID reader
The device TAB10s has a badge reader allowing to recognize the badges supporting the RFID/NFC technology.

Type
NFC type A
NFC type A
NFC type A
NFC type A
NFC type A
NFC type A
NFC type A
NFC type A
NFC type A
NFC type B
NFC type B
NFC type F
NFC type V
RFID LF¹

Modulation frequency 13.56 MHz 13.56 MHz 13.56 MHz 13.56 MHz 13.56 MHz 13.56 MHz 13.56 MHz 13.56 MHz 13.56 MHz 13.56 MHz 13.56 MHz 13.56 MHz 13.56 MHz 125 KHz

Brand (Manufacturer) Mifare Classic 1K/4K (NXP)

Applicable standard ISO 14443 typeA

Data rate (kbps)
106

Mifare Plus EV1/EV2 2K/4K (NXP)

ISO 14443 typeA

106

Mifare UltraLight EV1/C (NXP)

ISO 14443 typeA

106

Mifare DESFire D40/EV1/EV2 2K/4K/8K (NXP)

ISO 14443 typeA

106

Mifare NTAG203

ISO 14443 typeA

106

Jewel (Innovision)

ISO 14443 typeA

106

Topaz 512 (BCM512)

ISO 14443 typeA

106

Kovio (Kovio)

ISO 14443 typeA

106

SLE66 (Infineon), SmartMx (NXP)

ISO 14443 typeA

106

Cartes de transport (Innovatron), Calypso

ISO 14443 typeB

106

Micropass, Vault (Inside), 16RF (ST), SLE66 (Infineon)

ISO 14443 typeB

106

Felica (Sony) JIS 6319

ISO 18092

212, 424

Icode (NXP), iclass (Hid), Tag-it (TI), LR (ST)
Hitag (NXP), 125KHz Prox (HID)

ISO 15693
ISO 18000-2, ISO11784/11785/14223

¹ only UID of RFID is supported.

Supported Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes

Tested configuration

90

5.3 Antenna return loss
This is the return loss diagram for the WIFI/Bluetooth antenna:
91

5.4 Conformities EUROPE
In conformity with the following European directives: LVD 2014/35/EU , EMC 2014/30/EU , RED 2014/53/EU .
92

Contacts
Part VI
93

6.1 Contacts
For further information, please contact us: Technical support: support@qeedji.tech, Sales department: sales@qeedji.tech.
Refer to the Qeedji Website for FAQ, application notes, and software downloads: https://www.qeedji.tech/ Qeedji FRANCE INNES SA 5A rue Pierre Joseph Colin 35700 RENNES Tel: +33 (0)2 23 20 01 62 Fax: +33 (0)2 23 20 22 59
94

Appendix
Part VII
95

7.1 Appendix: Qeedji PowerPoint publisher for Media Players
This appendix explains how to publish .pptx MS-Powerpoint presentation on TAB10s devices using your MS-Office PowerPoint, on which the Qeedji PowerPoint Publisher For Media Players PowerPoint Add In is installed.
The Qeedji PowerPoint Publisher For Media Players PowerPoint Add In can deal with several TAB10s devices with the same MS-PowerPoint presentation. In this version, only the TAB10s devices, whose WebDAV servers are available with the http:// scheme (default value), are supported. The TAB10s device needs to be purged from any other existing APK.
96

Qeedji PowerPoint Publisher For Media Players: installation
The Qeedji PowerPoint Publisher For Media Players PowerPoint Add In needs to be installed once: download the appropriate installer (.msi file): Qeedji PowerPoint Publisher For Media Players (nt_ia64) for your MS-Office (nt_ia64), Qeedji PowerPoint Publisher For Media Players (nt_ia32) for your MS-Office (nt_ia32). execute the installer and choose the Everyone or Just for me installation according to your needs. For example, choose Just me , click on Next button at each step by checking the default installation settings. Choosing Everyone may require to run the PowerPoint with the Administrator rights to be able to deactivate the Qeedji PowerPoint Publisher For Media Players PowerPoint Add In afterwards. Warning: one of the installation steps is quite long and can take several minutes (for example, 2 minutes) and may depend on the computer.
Open MS-Office PowerPoint and check that a Qeedji 1 menu has appeared. Clicking on it makes appear a Qeedji ribbon which has 3 items: Publish 2 , Settings 3 , About 4 .
1 234
If the Qeedji menu 1 does not appear after a successful installation, contact support@qeedji.tech. In the Qeedji ribbon, click on the About 4 item to see the version of the Qeedji PowerPoint Publisher For Media Players PowerPoint Add In. For older computer, it could be requested to install first .NET framework version 4.X.Y before installing the Qeedji PowerPoint Publisher For Media Players PowerPoint Add In. The same language is used for Qeedji PowerPoint Publisher For Media Players PowerPoint Add In interface and MS- Windows. In case you need to upgrade Qeedji PowerPoint Publisher For Media Players PowerPoint Add In, it is required to close MS-Office PowerPoint and open it again to use the new version. In some rare cases, the warning message PowerPoint has problems with the Qeedji complement. If the problem persists, disable this add-on and check for updates. Do you want to disable it now? (yes/no) could be prompted when opening a MS-Office PowerPoint. In this case, do ignore the message by clicking No . It should not prevent the Qeedji PowerPoint Publisher For Media Players to work properly.
Qeedji PowerPoint Publisher For Media Players: uninstallation
To remove the Qeedji PowerPoint Publisher for Media Player addin from your MS- Windows, use the Add or remove programs MS-Windows menu, then remove the program Qeedji PowerPoint Publisher for Media player .
Qeedji PowerPoint Publisher For Media Players: upgrade/downgrade
Before installing a new Qeedji PowerPoint Publisher For Media Players version, it is advised to: close MS-PowerPoint then, uninstall the previous MS- PowerPoint add-in version. In case the version in the About pane of the Qeedji PowerPoint Publisher For Media Players is not corresponding the Qeedji PowerPoint Publisher For Media Players version just installed, disconnect from Office 365 then sign in again.
97

Qeedji PowerPoint Publisher For Media Players: register one or several devices
1 3

To register one or several TAB10s devices, open you MS-Office Powerpoint presentation then:
click on the Qeedji 1 menu, on the Qeedji ribbon, click on the Settings 3 item then select the Devices tab.
Some of the MS-PowerPoint transition effects may be not yet supported. For further information, refer to the media player release note.
On the Devices 11 tab, click on the Auto detection 12 button to detect the TAB10s devices available on your local network.

11

12

98

Select 14 the appropriate TAB10s devices to create a list of appropriate TAB10s devices as possible applicant for the MS-Powerpoint presentation.
14

Select then the only TAB10s devices on which you want to publish, by double clicking on them.
The TAB10s devices sorting order in the list is decisive because it is taken into account during the publication. The slides of the first section, or the first ten slides, are always affected to the TAB10s device located at the top of the list. Then the publication is continuing with the next TAB10s device located immediately below, and so on.
Select a TAB10s device and use the up 16 arrow or the down 17 arrow to sort them in the right order to match the MS-PowerPoint sections.

15

18

16 17

The default identifier/password credentials to access to the TAB10s device’s Web server is admin / admin . After an UPnP detection, the TAB10s devices are by default registered in Qeedji PowerPoint Publisher For Media Players with the default user/password admin / admin credentials to access to their Web server. If you must publish your Qeedji PowerPoint Publisher For Media Players App on a device with some identifier/password credentials that are not the default one, select this TAB10s device in the list, press on the Edit button, and change the user/password by the appropriate identifier/password credentials specified for this device.
The connections profiles that can be used to publish the App on the TAB10s device’s Web server are: Administration User , Administration Web service and Publishing software .

99

Qeedji PowerPoint Publisher For Media Players: publish
To publish a MS-Powerpoint content on your tablet, open your MS-Powerpoint presentation in MS-PowerPoint software. Then: click on the Qeedji 1 menu, on the Qeedji ribbon, click on the Publish 2 item.
1 2
Before publishing with the Publish item, it is advised to check in the Settings item, that the registered TAB10s devices are consistent and sorted in the right order. The Publishing status report is showing whether the publishing on each TAB10s devices has succeeded or not:
Publishing succeeded : the publication has succeeded Publishing failure (Error: 503) : the publishing has failed. In this case, check the network connection between your computer and the TAB10s. Publishing status report example: 1/5 – Publishing on device: AMP300 (192.168.1.84)
Publishing succeeded 2/5 – Publishing on device: DMB400-F1 (192.168.1.140)
Publishing succeeded 3/5 – Publishing on device: SMA300-F1 (192.168.1.88)
Publishing succeeded 4/5 – Publishing on device: TAB10-H9 (192.168.1.85)
Publishing succeeded 5/5 – Publishing on device: TAB10s (192.168.1.52)
Publishing succeeded Publishing completed
Warning – Unable to find the following fonts: Arvo, Montserrat Black The Publishing status report is showing also whether the MS-PowerPoint medias can be rendered with the right fonts. In case some fonts can not be found on the Windows OS, a message Warning – Unable to find the following fonts is displayed followed by the missing fonts names. To solve the rendering issue, install the missing fonts on your Windows OS and publish again. The PowerPoint presentation slideshow is now displayed on your tablet.
100

Qeedji PowerPoint Publisher For Media Players: define a default duration per page
To define a default duration per page to your MS-PowerPoint presentation, open you MS-Office Powerpoint presentation then: click on the Qeedji 1 menu, on the Qeedji ribbon, click on the Settings 3 item then select the Advanced 4 tab.
1 3
It is possible then to force for manual transitions a automatic progression of