Edit the instance in the sidebar (✎) to add credentials, then generate a report.
GreenLake × Central Bridge
Licensing report and inventory tools for the selected
instance.
Edit the instance in the sidebar (✎) to add credentials, then generate a report.
The report needs two data sources: HPE GreenLake (device inventory + subscription keys) and Aruba Central (AP up/down status and names). Everything is read-only. Use the Instances sidebar to keep one credential set per customer, workspace, or region. Open a section below for the part you need.
common.cloud.hpe.com and pick the workspace
that owns your devices.Is this me? You open Central from the GreenLake portal
(common.cloud.hpe.com) and your Central has the new
left-hand navigation. Your API base URL looks like
https://us1.api.central.arubanetworks.com.
https://<cluster>.api.central.arubanetworks.com,
e.g. us1, eu1, de1.Is this me? You sign in directly at
central.arubanetworks.com. Your API gateway looks like
https://apigw-prod2.central.arubanetworks.com.
In the Action needed tab of a generated report, each Down AP holding a subscription has two buttons:
The Detach button also appears in Mismatches → In GreenLake but not in Central for devices that hold a subscription even though Central has never seen them (spares, RMA'd units).
These buttons only exist in the app — a downloaded report is a static snapshot and cannot change anything.
The Add inventory tool registers new subscription keys and
new devices in the current instance's GreenLake workspace in one
action — keys one per line, devices as serial,mac
lines, or upload the same CSV GreenLake provides for device import
(Serial_No,MAC_Address,…). GreenLake processes
additions asynchronously and accepts up to five devices per API
call (the tool batches larger lists automatically), so give a large
batch a minute before regenerating the report. The GreenLake
credential needs Operator role or higher.
Saved instances — including their secrets — live unencrypted in this browser's local storage on this device, so anyone who can open this browser profile could read them; delete an instance (🗙 in the sidebar) to remove it. When you generate a report, credentials are sent to this app's server (a Cloudflare Worker) over HTTPS, used for the HPE/Aruba API calls, and discarded — nothing is stored server-side. Each person uses their own credentials, so another visitor to this URL cannot see your data or act on your workspace. This is a shared public URL: don't paste credentials on a device or browser profile you don't trust.
The generated report is a self-contained HTML file with the data baked in — no credentials inside — so that file is safe to share.