OBSIDIAN Device

The OBSIDIAN is a high-performance security workstation designed for demanding deployments and compute-intensive operations. Built on the powerful LattePanda Sigma platform, it delivers workstation-class performance in a compact form factor.

🚧 Coming Soon The OBSIDIAN device is currently in development. Specifications shown below are preliminary and subject to change. Contact arrow@vtemlabs.com for availability updates.

Overview

The OBSIDIAN is designed for scenarios where maximum performance is critical. It provides:

Workstation Performance - Intel Core i5-1340P with 12 cores and 32GB RAM
Massive Storage - 2TB NVMe SSD with LUKS encryption
Always-On Connectivity - VPN with cellular backup (Sierra Wireless EM7455)
Dual 2.5GbE Networking - Intel i226-V for high-speed network operations
Thunderbolt 4 Expansion - Connect external GPUs, displays, or high-speed storage

Technical Specifications

The OBSIDIAN device is built on the LattePanda Sigma platform with custom modifications by VTEM Labs.

Processing & Memory

Component	Specification
Processor	Intel Core i5-1340P (12-Core, 16-Thread, up to 4.6GHz)
Architecture	13th Gen Intel (Raptor Lake)
RAM	32GB LPDDR5-6400MHz (Dual-Channel)
Storage	2TB NVMe SSD (LUKS encrypted)
Graphics	Intel Iris Xe Graphics (80 EU, up to 1.45GHz)
TPM	TPM 2.0 (built-in)

Connectivity

Interface	Details
Ethernet	2x 2.5GbE Intel i226-V
USB	2x USB 2.0 Type-A, 2x USB 3.2 Gen2 Type-A (10Gbps)
Thunderbolt	2x Thunderbolt 4 Type-C (40Gbps, DP Alt Mode, PD)
Cellular	Sierra Wireless EM7455 LTE-Advanced Cat 6 (300/50 Mbps)
LTE Bands	B1, B2, B3, B4, B5, B7, B8, B12, B13, B20, B25, B26, B29, B30, B41
3G Fallback	UMTS/HSPA+ B1, B2, B3, B4, B5, B8
GNSS	GPS, GLONASS, BeiDou, Galileo (via LTE modem)

Expansion & I/O

Interface	Details
M.2 M Key (1)	PCIe 4.0 x4 (NVMe SSD - 2TB installed)
M.2 M Key (2)	PCIe 3.0 x4 (available for expansion)
M.2 B Key	PCIe 3.0 x1 + USB 3.0 (LTE modem installed)
M.2 E Key	PCIe 3.0 x1 + CNVio (Wi-Fi module slot)
SIM Slot	Micro SIM for cellular connectivity
Arduino	Integrated ATmega32U4 coprocessor
GPIO	20 digital I/O, 12 analog inputs, 7 PWM, UART, I2C, SPI
COM Port	RS232/RS485 serial header
SATA	SATA III data + power connectors
Audio	3.5mm headphone/microphone combo jack

Video Output

Interface	Details
HDMI	HDMI 2.1 (up to 4096×2304 @ 60Hz)
DisplayPort	DP 1.4a via Thunderbolt 4 (up to 8K @ 60Hz)
eDP	eDP 1.4b (up to 4096×2304 @ 120Hz)
Multi-Display	Supports up to 4x 4K displays simultaneously

Physical Specifications

Attribute	Value
Dimensions	5.7” × 4.0” × 0.9” (146 × 102 × 24 mm)
Enclosure	Custom OBSIDIAN aluminum chassis
Cooling	Active (integrated fan)
Operating Temp	32°F to 113°F (0°C to 45°C)
Power Input	USB-C PD (via Thunderbolt) or 12V DC (5.5×2.5mm barrel)

Software

Feature	Details
Operating System	Kali Linux (OBSIDIAN image)
VPN	NetBird client (always-on)
Management	ARROW Control agent
Encryption	LUKS2 full-disk encryption (2TB NVMe)
Secure Boot	UEFI Secure Boot enabled

ARROW vs OBSIDIAN Comparison

Feature	ARROW	OBSIDIAN
Status	✅ Available	🚧 Coming Soon
Form Factor	Compact	Performance
Base Platform	LattePanda 3 Delta	LattePanda Sigma
Processor	Intel N5105 (4C/4T, 2.9GHz)	Intel i5-1340P (12C/16T, 4.6GHz)
RAM	8GB LPDDR4	32GB LPDDR5
Storage	1TB NVMe + 64GB eMMC	2TB NVMe
Ethernet	1x Gigabit	2x 2.5GbE
USB Ports	3x Type-A, 1x Type-C	4x Type-A, 2x Thunderbolt 4
Cellular	Sierra Wireless EM7455	Sierra Wireless EM7455
Cooling	Active (fan)	Active (fan)
Best For	Standard deployments	Compute-intensive operations

Choose ARROW when:

Standard security testing deployments
Cost-effective solution needed
Simpler setup requirements
Portable/travel use cases

Choose OBSIDIAN when:

Maximum CPU/RAM performance required
Large dataset processing or VM hosting
Multiple high-speed network connections needed
Thunderbolt expansion (eGPU, fast storage) required

What’s in the Box

When you receive your OBSIDIAN device, the package includes:

1x OBSIDIAN device unit (with built-in LTE antenna)
1x 65W USB-C PD power adapter
1x Thunderbolt 4 cable (1m)
1x Ethernet cable (1m Cat6)
1x Quick start guide
1x Carrying case (foam-padded)

Optional additions (if requested):

ALFA AWUS036AXM WiFi 6E adapter - For wireless security testing
VESA mounting bracket
12V DC power adapter
External LTE antenna kit

Initial Setup

1. Physical Connections

Step 1: Connect the USB-C power adapter to the USB-C port marked with a power symbol.

Step 2: (Optional) Connect an Ethernet cable for wired internet during setup.

Step 3: Press the power button. The LED ring will pulse purple during boot.

2. First Boot

On first boot, the OBSIDIAN will:

Initialize LUKS encryption - Set your disk encryption passphrase
Connect to VPN - NetBird automatically connects
Register with ARROW Manager - Device appears in your portal

Important The LED ring indicates device status:

Pulsing purple - Booting

Solid purple - Ready, no network

Solid blue - Online, VPN connected

Pulsing red - Error or needs attention

3. Verifying Connectivity

After boot is complete (solid blue LED):

From ARROW Portal:

Navigate to Devices
Find your OBSIDIAN in the device list
Status should show “Online”

From the Device (via ARROW Control):

Open ARROW Control from the portal
Launch Terminal
Run netbird status to confirm VPN
Run curl ifconfig.me to verify internet

Connecting to Your OBSIDIAN Device

Via ARROW Control (Recommended)

The primary way to manage your OBSIDIAN:

Log in to the ARROW Portal
Navigate to Devices and select your OBSIDIAN
Click Open Control
Access terminal, files, and system monitoring

Via SSH over VPN

For command-line access:

# Using VPN IP address
ssh arrowuser@<device-vpn-ip>

# Using NetBird hostname
ssh arrowuser@obsidian-<device-id>.netbird.cloud

Via USB-C Console

For emergency access without network:

Connect USB-C cable to the non-power USB-C port
Connect other end to your computer
Open serial terminal at 115200 baud
Log in with your credentials

Power Options

The OBSIDIAN supports flexible power configurations:

USB-C Power Delivery

Recommended: 65W+ USB-C PD charger (included)
Minimum: 20V @ 3A (60W)
Supports Thunderbolt 4 power delivery

12V DC Barrel

Standard 5.5mm × 2.5mm barrel connector
12V @ 5A recommended
Useful for vehicle or fixed installations

Power Bank Operation

The OBSIDIAN can run from USB-C power banks:

Power Bank Capacity	Approximate Runtime
10,000 mAh	~2 hours
20,000 mAh	~4 hours
30,000 mAh	~6 hours

Note Power bank must support USB-C PD output at 20V. Standard 5V power banks will not work.

Network Configuration

Cellular Connectivity

The OBSIDIAN uses an internal LTE antenna. For improved signal:

Position device near a window
Avoid metal enclosures
Optional: Connect external antenna kit

Failover Behavior

Network priority order:

Ethernet (highest priority)
Wi-Fi (if configured)
Cellular (automatic failover)

Failover is automatic and typically completes within 15 seconds.

Troubleshooting

LED Status Indicators

LED Pattern	Meaning	Action
Off	No power	Check power connection
Pulsing purple	Booting	Wait for completion
Solid purple	No network	Check connectivity
Solid blue	Online	Normal operation
Pulsing red	Error	Check ARROW Control for details
Alternating red/blue	Firmware update	Do not power off

Device Not Connecting

Verify power indicator is solid blue
Check cellular signal (internal antenna)
Try connecting via Ethernet temporarily
Check VPN status in ARROW Control

Thermal Management

In high ambient temperatures or sustained workloads:

Ensure adequate ventilation around device (fan exhaust unobstructed)
Avoid direct sunlight exposure
Verify fan is operating (you should hear it during heavy use)
Monitor temps via ARROW Control → System

USB-C Power Issues

If device won’t power on:

Verify charger supports USB-C PD at 20V
Try a different USB-C cable (not all support PD)
Use the included cable for troubleshooting
Check for cable/port damage

Maintenance

Software Updates

Managed identically to ARROW devices:

Navigate to Devices → select OBSIDIAN
Click Software Updates
Review and install available updates

Factory Reset

Via ARROW Control:

Go to System → Factory Reset
Confirm the action
Device reboots and requires re-provisioning

Warning Factory reset erases all data. Back up important files first.

ARROW Device - Full-size ARROW hardware
Device Requests - How to request an OBSIDIAN
Device Management - Portal device management
VPN Management - VPN configuration
ARROW Control Overview - Web-based management