ZHZN newcomer course — from the crate to running it in Operator

Who this is for: someone on their first day with a ZHZN vending cabinet, with or without a power-bank module. No engineering background assumed. What you will learn: inspect a delivery, use Android, connect a correctly provisioned cabinet, understand its factory evidence, complete authorized operator setup, witness a sale and run daily checks. Factory signatures belong to authorized manufacturer signers; this course does not give a newcomer that role. Time: allow one working day for training, plus time to resolve faults and complete any outstanding acceptance. Module times are estimates.

Each module gives a goal, steps, evidence and the current detailed manual. Use the coordinated approved cabinet, gateway and Operator releases. A version label or a completed training checklist alone is not release approval.

How to use it. Follow the modules in order with your assigned supervisor. Share the requested proof through your team's approved handover channel and review each block together. If stuck for ten minutes, record the exact screen and ask for help. Keep passwords, cabinet PINs, device credentials, MFA codes, customer details and payment details out of screenshots. Share a redacted screen with an external support or AI tool only if your organization allows it. A supervisor's message does not replace a required acceptance signature.

Keep the newcomer checklist beside the cabinet. The illustrated installation atlas explains all roles, screens and recovery paths. Illustrations are instructional; use the actual cabinet's labels, manuals and saved records.

Module 0 — Before the newcomer arrives (for the owner, 15 min)

Have these ready:

• Cabinet and delivery record: the physical serial, crate label, model, approved software record and factory traveller. ZHZN serials may look like 1A8B08520A50; copy the actual identifier, not this example.
• Your own named Operator account: verify its tenant, assigned machines and supported setup rights (machines:write). Crew membership alone does not grant every setup action. An authorized owner must perform unavailable actions or grant supported access. Never share the owner's password or MFA codes. See access boundaries.
• Network and provisioning: the venue Wi-Fi credentials or working SIM, plus an authorized installer who can verify the machine identity, gateway, device authentication and any required enrolment arming.
• Cabinet admin access: use this serial's approved provisioning/handover record. Do not take a default PIN from an old guide. A cloud PIN change must reach this cabinet before it changes local access; keep it out of chat.
• Approved downloads and a phone: use the downloads page and Operator platform guide. Confirm the right app for the cabinet versus the staff phone, and supported access for each platform. Bring an authorized payment method for supervised tests.
• Products and a traveller: actual product names, prices, currency, capacities and stock. The traveller records physical tests and accessory identifiers that an on-screen diagnostic cannot establish.
• Optional power bank: if fitted, its actual door ID, approved provisioning and the matching Kiosk-X QR sticker. See the power-bank visual manual.

Done when the owner has assigned each job to an authorized person and the newcomer can open this course and checklist on their own phone. Missing factory evidence or credentials is a handover issue to resolve, not permission to invent them.

Module 1 — Android on the cabinet's head unit (30 min)

Goal. Reach Android Settings and return safely to the vending screen.

Read first. Android controls in plain language and Open the service menu.

1. Before powering on, inspect shipping damage and have the qualified installer check placement, ventilation, anchoring and power against this cabinet's manufacturer manual. Do not open electrical compartments or improvise wiring.
2. Power on. The vending screen must appear by itself. If it does not, report the incomplete startup/lockdown setup before offering public service.
3. Tap the top-left corner 7 times within 5 seconds, then enter the authorized cabinet PIN. Five wrong tries lock access for 60 seconds; stop guessing and check the handover record with the authorized person.
4. Read the Service menu. Find Exit kiosk (Android Settings), Factory test / 工厂测试 and Board codes / 主板代码.
5. Open Exit kiosk (Android Settings). Find Network & internet, Apps and About tablet/device. An Android hardware serial may differ from the software machine number; retain their approved mapping.
6. Press Home. The kiosk must return on its own. If the Android launcher remains, have the authorized installer correct Home/management setup.
7. Take a screenshot, usually Power + Volume-down, or photograph the screen. Close privileged screens after use and exclude secrets from the evidence.

Done when you can open the Service menu, reach Settings and return to the kiosk. Send: a photo of the Service menu, with any sensitive details hidden.

If stuck. Use Installer troubleshooting. Do not uninstall the app or reset Android to recover a forgotten PIN.

Module 2 — Put the cabinet on Wi-Fi and prove it is online (15 min)

Goal. Prove a fresh cloud connection for the exact, correctly provisioned cabinet. Wi-Fi saying Connected is only the network check.

Read first. Network setup and ZHZN enrolment.

1. Service menu → Exit kiosk (Android Settings) → Wi-Fi → join the intended venue network. Complete any approved network access procedure.
2. Press Home. Have the authorized installer verify the actual machine identity, gateway and cabinet credential. If enrolment says it is waiting for arming, follow the authorized arming procedure before proceeding. An operator serial claim does not create a cabinet credential.
3. Once correctly provisioned, the cabinet registers and sends heartbeats. Give first boot time to finish; do not repeatedly restart or enrol it.
4. Have an authorized person inspect the matching cloud record and a fresh heartbeat. An unclaimed cabinet may require the authorized admin Warehouse view; an ordinary operator cannot assume access to every unclaimed machine.

Done when both the network and the fresh, matching cloud record have been checked. Send: a redacted Connected screen and the serial/heartbeat result.

If stuck. Check the network, gateway, credentials and enrolment response with the installer. Resolve any in-flight purchase or command before an approved restart. See Receiving a cabinet.

Module 3 — Know what this machine has (30 min)

Goal. Record what is physically fitted; a diagnostic does not inventory or qualify every accessory for you.

Read first. Fitted accessories and, if fitted, Power-bank hardware.

1. Photograph the actual serial label and compare it with the traveller.
2. With authorized cabinet access, count trays and note spiral/Y-lift types, lane mapping and visible condition. Leave wiring work to a qualified technician.
3. Record display resolution separately from physical screen size. Note camera fitted/absent; enable only the approved, tested camera experiences.
4. For Nayax, copy the 16-digit Device Number, preserving leading zeros. Do not use the shorter 9-digit Machine ID. Match the fitted reader and its merchant account with the authorized payment owner.
5. If a power-bank module is fitted, record its actual door ID (TPQBEEPA… style), cabinet association and QR destination. A vendor QR is not the Kiosk-X rental route; hold that service until the authorized team verifies the correct sticker and configuration.
6. Record printer fitted/absent, model and any other actual accessories.
7. Open Board codes / 主板代码; record the codes against this serial.

Done when the traveller matches the cabinet, including absent accessories. Send: the redacted traveller and relevant accessory photos; use not fitted only when the hardware is actually absent.

The cabinet has no general accessory scan/Fitted/Not fitted editor. Give the record to the authorized bench team, which must save and verify the real accessory bindings using the approved tooling. Do not borrow credentials or mark fitted hardware absent to clear a blocker.

Module 4 — The manufacturer flow: factory test and sign-off (30 min)

Goal. Understand and verify the manufacturer's evidence. At a factory, only an authorized technician/signatory performs and signs the required work. At a venue, the newcomer checks the delivered records and escalates missing or inconsistent evidence; they do not replace a manufacturer signature.

Read first. Manufacturer acceptance manual, its Chinese version, and the separate acceptance records.

1. Compare the installed machine app with the approved release record. An authorized installer handles updates using the correct package, same signer and approved higher version code. Android installation refusal can mean signer, package, compatibility or file problems as well as a downgrade; retain the error and investigate. Do not uninstall or force a downgrade.
2. Review the physical factory acceptance test (FAT) record: every lane, fitted reader/payment profile, network, power/restart and other required subsystems must have truthful results for this cabinet. The six Android tests do not replace real dispense, settlement, cooling or accessory tests.
3. At the bench, open Factory test / 工厂测试 and run the six diagnostics: camera, speaker, microphone, nine touch zones, display colours and the actual board response on its port. Follow a requested app restart. Record failures and correct/retest them; do not fabricate PASS for unavailable hardware.
4. Review Upload OK / 上传成功, the saved run and any blockers. An upload alone is not a signed certificate. Check the current eligible run and accessory state rather than assuming a previous green screenshot applies.
5. Authorized manufacturer signer only: enter your own real identity and assigned employee reference, review the evidence and sign the Android acceptance record. Verify SIGNED — acceptance certificate issued and its saved certificate ID. Never invent an employee ID for a newcomer.
6. Separately have the authorized manufacturer complete the Partner FAT build and factory signature after its physical results and build details are final. The Android handwritten certificate does not create this second signature.
7. Put both signature references, physical test evidence, accessory record and exact build/serial details in the shipping handover. At receipt, compare them with this cabinet. A missing or mismatched record means hold acceptance and ask the manufacturer to resolve it.

Done when the authorized factory staff have completed the required records, or the receiving operator has verified those existing records. Send: the certificate/build references and completed traveller through the approved handover channel. This module does not perform operator receipt acceptance; that is a separate action after the on-site tests in Module 6.

If stuck. Use the manufacturer escalation table. A board fault requires a qualified technician; do not pull cables yourself.

Module 5 — First-time install in Operator (30 min)

Goal. Put this cabinet into its intended fleet with a reviewed address, confirmed on-site placement and accurate products before opening to shoppers.

Read first. Field setup and Machine address review.

Use your own named account with the required setup access. Open https://operator.kiosk-x.ai/machines/setup or Flutter Set up machine. Native Android uses Full console for the expanded setup workflow.

1. Claim: compare and type/scan the exact machine number. Claim into the intended operator account, not a temporary installer account. If already owned by this operator, continue its setup. If another operator owns it, stop and use the authorized ownership transfer; do not invent another serial.
2. Locate, Flutter: Check machine address → Check address → Choose this match → Confirm selected address → Done → Continue. Enter the complete structured street address and review the returned components and map point. Web: choose the correct candidate → Confirm selected address match → Continue with confirmed address. A display name or saved GPS pin is not address confirmation. Correct a wrong, missing or expired match and recheck.
3. On-site installation: standing at the actual cabinet, enter its exact machine number and precise placement, read and select the physical-presence declaration, then Flutter Confirm installation or web Confirm installation as operator. This is separate from the address match, factory signatures and observed vending tests. Verify the venue time zone and required host agreement separately. Moving the cabinet requires new review.
4. Payments: bind the fitted Nayax 16-digit Device Number and verify its saved binding and merchant/currency setup. For an approved QR-only cabinet, use Continue without binding a reader where offered and verify the supported live QR route. Skipping a reader or using test-mode QR does not prove payment readiness.
5. Products and first fill: replace any placeholder catalog with the actual products, lane map, prices, currency and capacities. Physically load and count stock. Use Confirm N aisles filled only for the selected aisles actually filled to capacity; record partial counts for partial fills. Wait for success and read back stock and checkout prices.
6. Review readiness: claimed, online, paymentsReady, planogramLoaded, boardCanDispense, plus addressConfirmed and installationConfirmed. Correct blockers; do not force incomplete checks green. Complete Module 6's supervised payment/delivery checks and separate receipt acceptance before opening to shoppers. Use Go live only when those requirements are met, then refresh and verify the returned Live status.

Done when setup details and readiness match the actual cabinet. Until the on-site acceptance is complete, keep public service held. Send: a redacted machine page showing the actual stage and any unresolved checks, not a staged all-green screen.

If stuck. Installation troubleshooting. An unavailable action needs an authorized owner, not a shared login.

Module 6 — Prove it sells, including the power bank (30 min)

Goal. Witness correct payment, exactly one delivery, matching stock and an order for this cabinet. Test each fitted and enabled payment/accessory path under the approved supervised acceptance procedure.

Read first. Prove the sale and accept delivery, Shopper use and recovery and, if fitted, Power-bank rental payment.

1. Snack: confirm the selected product, price and currency, use the approved Scan & Pay route and pay once. Observe one correct product drop. Keep its reference; verify Operator Sales, saved stock and the actual shelf count. An order appearing alone does not prove delivery.
2. If a reader is fitted, test a card purchase on that actual reader/profile. Match amount, currency, cabinet and provider reference. Have the payment owner verify processor settlement separately; a saved binding is not a deposit. Follow the linked shopper acceptance scenarios for declines, cancellation, missing delivery and recovery before public release.
3. Power bank, if fitted and approved: verify the door ID and Kiosk-X QR, destination cabinet, displayed rate/currency and return instructions. If the QR opens the vendor's route or points to another cabinet, hold rental service and correct it before testing.
4. Under the approved supervised procedure, rent one bank, observe ejection, return it and follow the saved rental states. Check the final charge and any deposit release/refund with the payment owner. Keep the provider and rental references; an emulator run is not physical acceptance.
5. Compare the actual transactions with Operator's money/reconciliation view. A pending refund is not returned money. An unavailable amount or currency mismatch requires review; do not read it as zero or combine unlike currencies.
6. After the physical checks and factory record review, the authorized receiving operator uses web machine Build & factory QA → Accept this machine. This records operator receipt acceptance. It is separate from the manufacturer's Android certificate and Partner FAT signature. Return to Go live, resolve every remaining gate and verify Live before opening to shoppers.

Done when the actual sale, enabled reader path and any fitted rental service meet their acceptance criteria, receipt is accepted and live status is verified. Send: redacted order/provider/rental references and recorded outcomes. Mark an absent power-bank module not fitted; do not require a rental from a cabinet without one.

If anything fails or is uncertain: hold the affected public service, retain the original reference and ask support to reconcile it. Do not create another charge or vend to explain the first. Record physical acceptance as NOT RUN until observed, FAIL for a failure, and PASS only with actual evidence. This software audit did not have a physical cabinet attached; it does not pre-approve this cabinet or its destination payment profile.

Module 7 — Run it day to day (30 min)

Goal. Practise daily operation with the controls your role and platform actually support.

Read first. Operator guide, Machine care and Fleet operations.

1. Morning check: inspect assigned machines for fresh presence, faults, customer issues and unresolved orders. Stale Online or a saved command is not proof of the current cabinet state.
2. Restocking: identify low stock, count what is physically present, load the correct products and record actual quantities. Read the saved result before retrying an uncertain update.
3. Sales and money: find today's orders, rentals and refunds for the correct machine/currency. Review missing or pending amounts. MoMa shows Nayax data; signing into it does not move money into Operator.
4. Fleet staff: use named accounts and assigned-machine access. An invite awaiting acceptance is not an active colleague. Ask an authorized owner to resolve missing permissions rather than sharing credentials.
5. Remote support: read the remote-access guide. Confirm the exact cabinet, authorized helper, session scope and any required on-site permission. A remote console may not include full Android control.
6. Updates and recovery: follow the staged update procedure. Pause service, resolve orders, use the approved same-signer higher-code release, then verify startup and a supervised sale or keep release held.
7. Leave it clean: close privileged screens, press Home and secure the cabinet. Resolve purchases/commands before an approved restart test; verify the kiosk returns on its own. Complete the leave-site checklist.

Done when required checks are complete with real evidence, or open faults are recorded with service held and an assigned owner. Send: the checklist with honest results and unresolved issues; do not tick unperformed checks.

Module 8 — Sign-off and feedback (15 min)

Goal. Record what was actually completed, who accepted it and what remains held. Training completion is not a manufacturer signature or production approval.

Completion record — send these six items together through the approved handover channel, using the actual date and named responsible people:

1. Cabinet serial, installed approved build and the two manufacturer signature references, or the exact missing-record blocker.
2. Completed traveller with observed physical results and fitted/absent accessories.
3. Machine page showing the actual lifecycle, five readiness checks, reviewed address and on-site confirmation, plus the separate operator receipt acceptance record or unresolved blocker.
4. First paid-vend reference, observed delivery/stock result and settlement evidence.
5. Fitted power-bank rental/return and final-money evidence, a recorded failure or NOT RUN, or not fitted with its reason.
6. Leave-site checklist, remaining holds, responsible follow-up person and recorded go-live decision. A failure photo documents a hold, not a passed test.

Feedback — answer all ten, one line each.

1. Which module took the longest, and how long?
2. Which step did you have to ask about, and what was unclear?
3. Which word or screen needed an explanation?
4. Where did the linked manual disagree with the actual screen?
5. Which photo or screenshot was hard to take, and why?
6. Which step would a video have helped with?
7. What did you do that is missing from this course?
8. Which step did not apply to this cabinet, and why?
9. Did the fitted power bank differ from Module 6, or was it absent?
10. Which module would you reread before setting up the next cabinet?

Send discrepancies to the responsible team. The detailed access boundaries and physical factory checks explain where a different authorized role or further evidence is required.

Where each thing lives — one table