SupportFlow Lite
SupportFlow Lite is SupportFlow in a web browser: a chat with your stations beside it, and nothing to install. Ask about your stations the way you would ask a colleague, and approve each command with your ControlKey.
What is this SupportFlow Lite?
SupportFlow Lite is an installation-free version which allows you to manage your stations, kiosks, or devices right from the browser. Using a built-in Luna model, the Lite client shares the same access as the full Client, just without having to download and install or even sign in to your Claude or ChatGPT. You can access this portal at https://www.koquelani.com/services/thin.
On the left is the conversation and the box you type in; on the right is the list of your stations - the same list as your account page, in the same folders. Click a station to point at it (“what is installed on this one?”); click it again to let it go. Right-click a station for its menu - see The station menu. Watch the demo, at the top of the page, plays the video above. The list can be folded away with the arrow at its top.
Log off, beside your name at the top right, signs you out and takes you back to the sign-in window.
This Lite client is a beta feature and subject to change.
Its access may be optionally disabled from within your User Portal.
Everything you can reach from the SupportFlow Client and your AI assistant you can reach here, with the exceptions listed under When do I need to use the SupportFlow Client instead?.
Turning it on
SupportFlow Lite is used only by accounts that have it turned on. On your account page, choose Download (under the SupportFlow Client sentence): on the page it opens, the SupportFlow Lite panel has an Enable SupportFlow Lite checkbox and, once it is ticked, an Open SupportFlow Lite button. Your account menu (your address, at the top right) has the same switch under My Account › SupportFlow Lite: one click turns it on or off, and the label beside it says which. If you try to sign in with it off, SupportFlow Lite tells you so and where to turn it on.
An account in High Security cannot use SupportFlow Lite: choosing the switch tells you why, and what to do instead - see Low, Medium and High Security.
Signing in
Signing in takes two steps:
- Email (username) and Password - the same ones you use for your account page - then Next.
- ControlKey - your ControlKey password. It never leaves your browser: SupportFlow Lite works out your ControlKey from it on your own computer, and uses that to sign your commands. It is not stored on our servers, so don't lose it.
If your browser offers to save your passwords, it keeps the two as separate logins: your account under your email address, and your ControlKey under your email address followed by (ControlKey), so each box is filled with its own. If an older saved login fills the wrong value into a box, correct it once in your browser's saved passwords. On a shared or public computer, do not let the browser save either.
Your ControlKey is kept only while the page is open. Reloading the page or opening it in a new tab asks for your ControlKey password again; signing out forgets it at once.
The eye at the end of each password and ControlKey box shows what you have typed, so you can check it; click it again to hide it. It hides again by itself when you sign in. Check that nobody is looking at your screen first.
SupportFlow Lite always asks you to sign in on its own page, even if you are already signed in to your account page in the same browser - so you choose which account you use. The account you are signed in as is shown at the top of the page and in every window that asks for your ControlKey. If it is not the account you meant, choose Not you? Sign in as someone else.
If your account has no ControlKey yet - for example, an account made on the account page rather than in SupportFlow Lite - SupportFlow Lite asks you to Create a ControlKey: type a ControlKey password twice; the window checks it against the rules below. Keep it somewhere safe: it cannot be recovered or reset by support.
Creating an account from SupportFlow Lite
New to SupportFlow? Choose Create account in the sign-in window. The first time, a short window explains your three sign-in details - your email address, your account password and your ControlKey password - and why the ControlKey password is yours alone. Alongside your email address and password you choose a ControlKey password. It must be at least 12 characters, different from your account password, and use three kinds of character (lower case, upper case, digits, symbols) - or be 16 characters or more; a short phrase works well. The window ticks each rule off as you type.
We then send you an email. Leave SupportFlow Lite open and click the link in the email: the page carries on by itself, asks whether you are starting an organization, joining one or keeping your stations to yourself, and then you are ready. Confirmed the link on your phone or closed the tab? Open SupportFlow Lite again and sign in.
Keep your ControlKey password somewhere safe. It cannot be recovered or reset by support - nobody but you ever has it.
Low, Medium and High Security
In Low Security Mode - where new accounts start - SupportFlow keeps your ControlKey, so SupportFlow Lite asks only for your email and password: there is no ControlKey password to type, and SupportFlow signs the commands you allow. You still see every command that changes a station before it is sent, with Allow and Deny. See Low Security Mode. The Administrator also finds Renew ControlKey in the Account menu; see Renewing the ControlKey yourself.
Otherwise SupportFlow Lite works with a ControlKey password - what the SupportFlow Client calls Medium Security. Your logins and stations are shared between both SupportFlow Lite and the Client harness version with one caveat, SupportFlow Lite only supports Medium Security mode at this time. If you require the added assurance of the High Security model, we recommend not using the SupportFlow Lite client.
To use SupportFlow Lite with an account set to High Security, switch the account to Medium Security in the SupportFlow Client: Options › ControlKey › Change ControlKey Mode. See High Security and Medium Security.
Adding stations from SupportFlow Lite
The green Download Endpoint button at the top of the station list downloads the KQS Endpoint installer - the same one your account page offers, named for your organization (or, if you choose, for your own stations). Run it on each PC, kiosk or server you want to reach; the machine appears in the list within a minute. A brand-new account with no stations yet sees the same button in the middle of the page.
The station menu
Right-click a station in the list for its menu. The station's name is at the top; Escape, or a click anywhere else, closes it.
| Choice | What it does |
|---|---|
| Add to group › | Files the station in one of your organization's groups. New Group… makes a group and puts the station in it; the groups listed below it move the station there; Remove from group takes it out again. The list shows the change straight away. See Groups for your stations. |
| Remote Access | Opens the Support Viewer for the station in a window of its own: its live screen, clicks and typing. SupportFlow Lite authorizes the viewer with your ControlKey (in Low Security Mode, SupportFlow does), and keeps it going while this page stays open - so leave SupportFlow Lite open while you use the viewer. The viewer's File Transfer works too: each list, copy, new folder and delete is signed by SupportFlow Lite the same way, and anything other than listing or copying a file asks you first. If no window opens, allow pop-ups for www.koquelani.com. Everything else is in the viewer's Actions menu: File Transfer (this computer on the left, the station on the right), Quality (Low, Med or High), View Size, Task Manager, Reboot… (it asks you first) and Disconnect, which ends the link and closes the window - see the viewer's Actions menu. Hover over the station's name at the top left to see its CPU, memory and disk use and its version of Windows. |
| Rename… | Changes the name the station goes by in SupportFlow. The machine's own Windows computer name stays as it is. |
| Edit Note… | The short note shown under the station's name, which everyone in your organization sees - where it is, or what it is for. Leave it empty to remove it. |
| Reboot… | Restarts the station, once you confirm. |
| Same-named stations… | Shown when more than one machine uses the station's name, or a new machine is waiting under it. Lists each machine with its GUID and when it last reported; the Administrator or a Manager can add a waiting machine, or remove an old entry. See Stations that share a name. |
| Decommission… | Removes the Endpoint from the station, and the station from SupportFlow, once you confirm. If another organization also has the station, you are asked first and offered Detach instead. See Removing a station. |
| Remove shared station… | Only on a station another organization shared with you. Takes it off your list and ends your access; the station itself is not changed. A shared station has no Rename or Decommission: those are its organization's. See Sharing a station with another account. |
| Share access…, Keys on this station…, Give up my access… | Only on a station shared with you without restrictions, which also has Rename and Decommission. Share access offers Limited Share or Unrestricted Share in a drop-down; Keys on this station lists the keys it trusts and lets you take them off - the keys of the organization it belongs to included. See Sharing stations. |
A station that is not responding offers Add to group, Edit Note and Decommission only. Rename and Decommission are for your organization's Administrator and Managers - and for you, on your own stations. Remote Access, Rename and Reboot are signed with your ControlKey, like every other command.
Asking, and approving commands
Answers that only need what SupportFlow already knows about your stations come straight back. A command that reaches a station is signed with your ControlKey in your browser before it is sent (in Low Security Mode, SupportFlow signs it once you allow it):
- Commands that only look - listing a folder, a live screenshot - are signed straight away.
- Commands that change something - running a command, ending a process, restarting - are shown to you first, with what will be run and where: choose Allow, Allow for this conversation (the rest of this conversation's commands are signed without asking), or Deny. A denied command is never sent.
Ask to see a station's screen and the latest picture it sent is shown in the conversation. Click the picture to see it enlarged, at the station's full resolution - click it again to see it at its own size, and Escape closes it. Save, or your browser's own Save image as… (right-click the picture), keeps a copy. Ask to remote into it - or say yes when the assistant offers - and a Remote Access button appears in the chat: it opens the Support Viewer in a window of its own, as Remote Access in the station menu does.
If the station's screen belongs to a Remote Desktop (RDP) session, the Remote Access line in the chat says (RDP Session - UI interaction not available in RDP), and the viewer shows the same note. You can watch the screen, but Windows does not pass clicks or typing from the viewer into a Remote Desktop session - to work on that station, use the session it shows, or someone at the machine itself.
Each step the assistant takes is shown as a line in the conversation; click it to see exactly what was sent and what came back. Stop (the square button) ends an answer part-way. New chat starts a fresh conversation.
A new station installed from your account page appears in the list marked New, with an Accept button for the Organization Administrator or a Manager: Accept tells it to trust your ControlKey, as Accept does in the SupportFlow Client (in Low Security Mode, the ControlKey SupportFlow keeps for your stations). A station another organization shared with you appears the same way, with Accept for you; the offer lasts 24 hours.
Downloading a file from a station
Ask for a file and the assistant fetches it from the station for you - signed with your ControlKey, like every command. A bubble in the conversation shows the file's name and how much of it has arrived; the X cancels it. When all of it is in, the bubble shows Save: click it and your browser saves the file as it saves any download.
- The assistant never sees what is in the file - only that it is on its way. To have it read a file, ask it to show you the file's contents instead.
- Files wait on SupportFlow's server until you save them: up to 2 GB for your account at a time, and up to 2 GB a file (512 MB from a station whose KQS Endpoint is older than 1.0.249). The X on a finished file removes it to make room.
- They are deleted when you sign out, or when you have been away from SupportFlow Lite for an hour. Save what you need before you go.
Sending a file to a station: the Upload Bin
The Upload Bin holds files from your own computer, ready to send to your stations. Click the upload icon under the message box (at the left) to open it, then drop files onto it - or anywhere on the page - or click it to choose them. Each file gets a number and shows how much of it has arrived; the X removes it, and Empty removes them all.
Then ask the assistant to send a file, by its number or its name, saying which station and where on it. You are asked to allow the send first - it is signed with your ControlKey, like every command - and a bubble in the conversation shows its progress until the station has saved it.
- Say where the file goes: a folder ending in a backslash keeps the file's name, or give the whole path. A file already there is left alone unless you ask for it to be replaced.
- The assistant never sees what is in your files - only their names and sizes.
- Up to 300 files and 2 GB a file (512 MB for a station whose KQS Endpoint is older than 1.0.249). They share your account's 2 GB of SupportFlow Lite file space with your downloads.
- Files are deleted when you sign out, or when you have been away from SupportFlow Lite for an hour.
- To move larger files, consider installing the SupportFlow Client, which doesn't have these limits.
The context gauge and Total Usage
The small circle under the message box, at the right, fills as the conversation grows: it shows how much of the assistant's context - everything it keeps in view for this conversation: your questions, its answers and what its steps brought back - is used. It turns amber, then red, as it nears full. When it does, start a New chat: the assistant then begins afresh, and long conversations are answered faster too.
Click the circle for Total Usage: how much of this month's SupportFlow Lite allowance your account has used, as a bar, and the date it resets on. Click anywhere else, or press Escape, to close it.
Sending feedback or reporting a bug
The bug icon at the bottom left, under the conversation, sends a note to KQS support. Choose Feedback / Suggestion, Bug Report or Other, write up to 1,500 characters, and press Send; you are told the reference it was given.
- Include this session's details sends the conversation as this page shows it - your questions, the answers, and each step the assistant took with what it sent and what came back (not the pictures) - so KQS support can see what happened. It is off unless you tick it. Leave it off if the conversation shows anything you would rather keep to yourself.
- Can we contact you? - ticked, KQS support may email you about it; untick it if you would rather not hear back.
- Never put a password or ControlKey password in feedback. KQS support never asks for one.
When do I need to use the SupportFlow Client instead?
- You require the assurance of High Security ControlKeys with maximum entropy.
- Moving large files: more than 2 GB a file, or more than your account's SupportFlow Lite file space at once. SupportFlow Lite downloads files from a station (see Downloading a file from a station) and sends them to one from its Upload Bin, and the Support Viewer's File Transfer, opened from SupportFlow Lite, copies files both ways.
- Updating a station's Endpoint.
- Managing ControlKeys: approving someone else's ControlKey, carrying keys to your stations, backing up, rotating and switching between High and Medium Security.
SupportFlow Lite, is as its name suggests, a Lite weight client and is not intended to replace the full SupportFlow Client for all use cases.
How SupportFlow Lite works and security considerations
SupportFlow Lite's answers come from OpenAI's Luna model at this time. It is important to realise that when using SupportFlow Lite, you will have limited control over the privacy of that data. While Koquelani's systems do not record what you send or receive, OpenAI's servers will see this information and may process it according to their policy. If you require control over this, do not use the Lite version and switch to using the Full SupportFlow Client.
Unlike the SupportFlow Client, which has no usage limits, each account has a separate monthly allowance for SupportFlow Lite usage since it has its own embedded AI. It renews on the 1st of each month, and the SupportFlow Client is not affected by its usage. See how much is left with the context gauge.
Keeping it safe
- Type your ControlKey password only into SupportFlow Lite at www.koquelani.com/services/thin - check the address bar. SupportFlow will never ask for it by email, by phone or anywhere else.
- Use a ControlKey password you use nowhere else, and keep it apart from your account password.
- On a shared or public computer, sign out when you finish (Log off, beside your name at the top right) and do not let the browser save the ControlKey password.
- Read what a command card says before you choose Allow, and use Allow for this conversation only when you are watching what the assistant does.
- If you think someone else knows your ControlKey password, replace your ControlKey from the SupportFlow Client's ControlKey page straight away; see Managing your ControlKey.