OBSIDIAN Device

The OBSIDIAN is the device you reach for when a job needs real horsepower. It is a security workstation built on the LattePanda Sigma platform, meant for compute-heavy work and demanding deployments where the standard ARROW would be working too hard.

Overview

Reach for the OBSIDIAN when performance is the deciding factor. It gives you:

Workstation-class compute: an Intel Core i5-1340P with 12 cores and 32GB of RAM, enough to run VMs and process large datasets on the device itself
2TB of LUKS-encrypted NVMe storage for those datasets and VMs
The same always-on VPN with cellular backup as the ARROW (Sierra Wireless EM7455/EM7565 or Quectel EM060K-GL)
Dual 2.5GbE networking on Intel i226-V, so you can sit inline or bridge two high-speed segments
Thunderbolt 4 expansion for an external GPU, fast storage, or extra displays

Technical Specifications

The OBSIDIAN device is built on the LattePanda Sigma platform with custom modifications by VTEM Labs.

Processing & Memory

Component	Specification
Processor	Intel Core i5-1340P (12-Core, 16-Thread, up to 4.6GHz)
Architecture	13th Gen Intel (Raptor Lake)
RAM	32GB LPDDR5-6400MHz (Dual-Channel)
Storage	2TB NVMe SSD (LUKS encrypted)
Graphics	Intel Iris Xe Graphics (80 EU, up to 1.45GHz)
TPM	TPM 2.0 (built-in)

Connectivity

Interface	Details
Ethernet	2x 2.5GbE Intel i226-V
USB	2x USB 2.0 Type-A, 2x USB 3.2 Gen2 Type-A (10Gbps)
Thunderbolt	2x Thunderbolt 4 Type-C (40Gbps, DP Alt Mode, PD)
Cellular	Sierra Wireless EM7455 / EM7565 LTE-Advanced or Quectel EM060K-GL (300/50 Mbps)
LTE Bands	B1, B2, B3, B4, B5, B7, B8, B12, B13, B20, B25, B26, B29, B30, B41
3G Fallback	UMTS/HSPA+ B1, B2, B3, B4, B5, B8
GNSS	GPS, GLONASS, BeiDou, Galileo (via LTE modem)

Expansion & I/O

Interface	Details
M.2 M Key (1)	PCIe 4.0 x4 (NVMe SSD - 2TB installed)
M.2 M Key (2)	PCIe 3.0 x4 (available for expansion)
M.2 B Key	PCIe 3.0 x1 + USB 3.0 (LTE modem installed)
M.2 E Key	PCIe 3.0 x1 + CNVio (Wi-Fi module slot)
SIM Slot	Micro SIM for cellular connectivity
Arduino	Integrated ATmega32U4 coprocessor
GPIO	20 digital I/O, 12 analog inputs, 7 PWM, UART, I2C, SPI
COM Port	RS232/RS485 serial header
SATA	SATA III data + power connectors
Audio	3.5mm headphone/microphone combo jack

Video Output

Interface	Details
HDMI	HDMI 2.1 (up to 4096×2304 @ 60Hz)
DisplayPort	DP 1.4a via Thunderbolt 4 (up to 8K @ 60Hz)
eDP	eDP 1.4b (up to 4096×2304 @ 120Hz)
Multi-Display	Supports up to 4x 4K displays simultaneously

Physical Specifications

Attribute	Value
Dimensions	5.7” × 4.0” × 0.9” (146 × 102 × 24 mm)
Enclosure	Custom OBSIDIAN aluminum chassis
Cooling	Active (integrated fan)
Operating Temp	32°F to 113°F (0°C to 45°C)
Power Input	USB-C PD (via Thunderbolt) or 12V DC (5.5×2.5mm barrel)

Software

Feature	Details
Operating System	Kali Linux (OBSIDIAN image)
VPN	NetBird client (always-on)
Management	ARROW Control agent
Encryption	LUKS2 full-disk encryption (2TB NVMe)
Secure Boot	UEFI Secure Boot enabled

ARROW vs OBSIDIAN Comparison

If you are deciding between the two, this is where they diverge. The ARROW is the compact, cost-effective workhorse for standard engagements; the OBSIDIAN trades size and price for far more compute.

Feature	ARROW	OBSIDIAN
Status	Available	Coming soon
Form Factor	Compact	Performance
Base Platform	LattePanda 3 Delta	LattePanda Sigma
Processor	Intel N5105 (4C/4T, 2.9GHz)	Intel i5-1340P (12C/16T, 4.6GHz)
RAM	8GB LPDDR4	32GB LPDDR5
Storage	1TB NVMe + 64GB eMMC	2TB NVMe
Ethernet	1x Gigabit	2x 2.5GbE
USB Ports	3x Type-A, 1x Type-C	4x Type-A, 2x Thunderbolt 4
Cellular	EM7455 / EM7565 / EM060K-GL	EM7455 / EM7565 / EM060K-GL
Cooling	Active (fan)	Active (fan)
Best For	Standard deployments	Compute-intensive operations

Pick the ARROW for most engagements: standard testing, travel, and anywhere a smaller, lower-cost, simpler device is the right fit.

Pick the OBSIDIAN when the work outgrows that: heavy CPU and RAM demands, large dataset processing or hosting VMs on the device, multiple high-speed network connections, or Thunderbolt expansion for an external GPU or fast storage.

Pricing

The OBSIDIAN is a premium device, so it costs more to run than a standard ARROW. How that premium is applied depends on your plan, and the request form shows the figures that apply to you before you submit.

Pay-as-you-go: the OBSIDIAN is billed at a premium hourly rate compared to a standard ARROW device.
Unlimited Access Plan (UAP): the OBSIDIAN carries a small per-hour premium over a standard device. Alternatively, you can purchase the hardware outright and add it to your allotted device pool, so it draws from your existing allocation instead of the hourly premium.

We keep exact figures out of the docs because they track your plan and current rates. For a precise quote, email [email protected] and we will walk you through the options.

What’s in the Box

Every OBSIDIAN device ships with:

1x OBSIDIAN device unit (with built-in LTE antenna)
1x 65W USB-C PD power adapter
1x Thunderbolt 4 cable (1m)
1x Ethernet cable (1m Cat6)
1x Quick start guide
1x Carrying case (foam-padded)

If you asked for them when you requested the device, you may also receive:

ALFA AWUS036AXM WiFi 6E adapter for wireless security testing
VESA mounting bracket
12V DC power adapter
External LTE antenna kit

Initial Setup

1. Physical Connections

Connect the USB-C power adapter to the USB-C port marked with a power symbol.
Optionally connect an Ethernet cable if you want wired internet during setup.
Press the power button. The LED ring pulses purple while the device boots.

2. First Boot

On first boot the OBSIDIAN sets up its own disk encryption, joins the VPN, and registers with the portal. Unlike the ARROW, it prompts you to set the LUKS disk passphrase the first time, so keep that passphrase somewhere safe. After that, NetBird connects automatically and the device appears in your portal within a few minutes.

The LED ring tells you where the device is in that process:

Pulsing purple while it is booting
Solid purple when it is ready but has no network yet
Solid blue once it is online and the VPN is connected
Pulsing red if something has gone wrong and needs your attention

3. Verifying Connectivity

Wait for the LED ring to go solid blue, then confirm from the ARROW Portal: open Devices, find your OBSIDIAN, and check that its status reads Online.

To verify from the device itself, open ARROW Control from the portal, launch the terminal, and run netbird status to confirm the VPN and curl ifconfig.me to confirm internet.

Connecting to Your OBSIDIAN Device

Via ARROW Control (Recommended)

ARROW Control is the primary way to manage the OBSIDIAN, with a terminal, file access, and system monitoring in the browser:

Log in to the ARROW Portal
Open Devices and select your OBSIDIAN
Click Open Control

Via SSH over VPN

When you want a raw shell, SSH in over the VPN:

# Using VPN IP address
ssh arrowuser@<device-vpn-ip>

# Using NetBird hostname
ssh arrowuser@obsidian-<device-id>.netbird.cloud

Via USB-C Console

If the device has no network and you need in anyway, connect a USB-C cable from the non-power USB-C port to your computer, open a serial terminal at 115200 baud, and log in with your credentials.

Power Options

The OBSIDIAN is flexible about how you power it, which matters in the field where a wall outlet is not always an option.

USB-C Power Delivery is the usual path. Use the included 65W or larger USB-C PD charger; the minimum is 20V at 3A (60W), and the port supports Thunderbolt 4 power delivery.

12V DC barrel is handy for vehicle or fixed installations. Use a standard 5.5mm by 2.5mm connector, 12V at 5A recommended.

Power bank operation lets you run untethered, as long as the bank does USB-C PD at 20V. A plain 5V bank will not work. Rough runtimes:

Power Bank Capacity	Approximate Runtime
10,000 mAh	~2 hours
20,000 mAh	~4 hours
30,000 mAh	~6 hours

Network Configuration

Cellular Connectivity

The OBSIDIAN uses an internal LTE antenna. If signal is weak, position the device near a window, keep it out of metal enclosures, and connect the external antenna kit if you have one.

Failover Behavior

The device prefers wired, then wireless, then cellular: Ethernet first, Wi-Fi if configured, and cellular as automatic failover. The switch is automatic and usually completes within 15 seconds.

Troubleshooting

LED Status Indicators

LED Pattern	Meaning	Action
Off	No power	Check power connection
Pulsing purple	Booting	Wait for completion
Solid purple	No network	Check connectivity
Solid blue	Online	Normal operation
Pulsing red	Error	Check ARROW Control for details
Alternating red/blue	Firmware update	Do not power off

Device Not Connecting

Confirm the LED ring is solid blue first. If it is stuck on solid purple (ready, no network), check the cellular signal on the internal antenna, plug in Ethernet temporarily to rule out cellular, and check the VPN status in ARROW Control.

Thermal Management

The OBSIDIAN’s fast CPU produces more heat than the ARROW’s, so under sustained load give it room. Keep the fan exhaust unobstructed, keep it out of direct sunlight, confirm the fan is running (you should hear it during heavy use), and watch temperatures in ARROW Control under System.

USB-C Power Issues

If the device will not power on over USB-C, the cause is almost always the charger or cable. Make sure the charger supports USB-C PD at 20V, try a different cable since not all support PD (the included one does), and check the cable and port for damage.

Maintenance

Software Updates

Updates work exactly as they do on the ARROW. Open Devices, select your OBSIDIAN, click Software Updates, then review and install what is available.

Factory Reset

To wipe the device back to factory defaults, open ARROW Control, go to System, then Factory Reset, and confirm. The device reboots and has to be re-provisioned.

A factory reset erases everything on the device, so back up anything you need first.

ARROW Device - Full-size ARROW hardware
Device Requests - How to request an OBSIDIAN
Device Management - Portal device management
VPN Management - VPN configuration
ARROW Control Overview - Web-based management