The Connected-Device Commissioning SOP

Purpose

Commissioning is the point at which a connected device stops being installed and starts being trusted. A device that is wired and powered but on a weak signal, registered to the wrong person, running old firmware, or sending alerts nobody has tested gives the customer the belief that they are protected without the protection. This procedure guarantees that every connected device the shop hands over is on a signal that will hold, owned by the customer, reachable by the shop only with consent, current, proven to alert, understood by the customer, and written down.

Scope

Covers: any shop-installed device that reports to an app or a manufacturer's cloud: thermostats, water heater and boiler modules, leak sensors and automatic water shutoffs, generator and pool controllers, garage door openers, irrigation controllers, smart locks, energy monitors.

Does not cover: the equipment's own installation (each has its trade procedure and the manufacturer's instructions; thermostats specifically have their own install procedure in the library); changing the customer's network, which follows The Customer Network Change Authorization SOP; transferring devices when a home sells, which follows The Connected-Device Handoff at Home Sale SOP.

Roles and responsibilities

Procedure

1. Confirm the equipment is installed, closed up and running on its own. Finish the trade install per the manufacturer's instructions before touching the app, then confirm the equipment runs its basic function without the app: the furnace fires and holds, the valve opens and closes from its manual control, the opener cycles from its wall button. Acceptance: basic operation observed, every cover and panel reinstalled, device powered and showing its ready indication. Wrong looks like: a fault code, a panel still off, or a device that only "works" from the app. Stop rule: do not begin commissioning; resolve the install first. Hazard: this step re-energizes the equipment; close every cover before restoring power at the breaker, and stand clear of moving parts (opener rail, pump, valve actuator) on the first cycle.

2. Measure signal where the device lives, on the device's band. Follow Measuring Wi-Fi Signal Where the Equipment Lives: three readings with doors closed and panels on, record the weakest. Acceptance: weakest reading -67 dBm or stronger, proceed; -68 to -75 dBm, proceed only after telling the owner it is marginal and recording that. Wrong looks like: weakest reading weaker than -75 dBm, or a solid reading on a channel crowded with neighbors. Stop rule: at weaker than -75, stop commissioning. Offer the owner the options (move the device or its hub if the design allows, add coverage, or leave it uncommissioned) and let them decide; any network change goes through the authorization SOP; re-measure before resuming. Hazard: reading in attics and crawlspaces: stand on joists or boards, avoid peak attic heat, and do not enter a crawlspace where water touches electrical equipment until that circuit is off.

3. Join the device to the customer's main network. Use the main network, not a guest network, with the customer typing the password. Acceptance: the device shows connected on its own display or light, appears in the router's device list where the customer can show it, and holds connection for five minutes. Wrong looks like: repeated join failures or a join that drops inside five minutes. Stop rule: work steps 1 to 7 of Getting a Stubborn Device onto the Customer Network; if it still fails, record each step tested and escalate to the manufacturer's dealer line rather than repeating resets. Hazard: a device reset can move a valve or restart a burner; tell the household before any reset, with no fixtures running on water equipment.

4. Create the account in the customer's name. The customer's own email, a password they type, and their own phone for any verification code. Acceptance: the customer logs in on their own phone and sees the device. Wrong looks like: the shop's email, a technician's personal email, or a password the tech chose. Stop rule: if the customer has no email or refuses an account, follow the options in Who Owns the App Account on a Connected Device (a family member as owner with the customer's recorded agreement, or a standalone mode with alerts recorded as not configured); never register to the shop. Hazard: no physical hazard here; the exposure is the customer's data, so never write their password on a job, a sticker or a photo.

5. Request dealer access, approved by the customer. Send the request from the shop's professional account, at the narrowest scope that serves the service relationship (view and diagnostics by default). Acceptance: the customer approves on their own phone and the shop's portal shows the device. Wrong looks like: the tech approving it on the customer's phone, or full control requested without a reason. Stop rule: if the customer declines, proceed without it and record "dealer access declined"; the device is still commissioned. Hazard: none physical; the risk is access the customer does not know about, which approval in their own hands prevents.

6. Update the firmware. Check for updates in the app and install them while you are on site. Acceptance: the app reports the current version and the device is back online within 15 minutes of starting the update. Wrong looks like: an update stalled for more than 15 minutes, or a device that does not return. Stop rule: never remove power mid-update; follow the manufacturer's recovery procedure, and if the device is unrecoverable, record it and escalate. Hazard: many devices reboot during an update; water shutoffs may cycle and heating equipment may shut down, so tell the household, and in freezing weather confirm the heat restarts before moving on.

7. Test the alerts with a real trigger, then put everything back. Use the manufacturer's test function or a real, harmless trigger: a damp cloth on a leak sensor, unplugging a sensor hub for a power-loss alert. Acceptance: the alert reaches the customer's phone within 2 minutes, and any protective action happens (the valve closes, the siren sounds). Wrong looks like: no alert, an alert only on the tech's phone, or no protective action. Stop rule: check the customer's phone notification permissions and retest once; if it still fails, do not leave the customer believing they are protected: record "alerts not verified" and tell them in plain words. Hazard: never simulate a fault on a combustion path, a relief valve, or a smoke or CO alarm beyond its own test button; before a valve test, confirm no fixtures or appliances are running. To restore, dry the sensor, reopen the valve slowly from its control while watching the valve body and nearby joints for leaks, and confirm water flows at one fixture and the app shows the valve open.

8. Have the customer operate it. Hand the phone over and talk them through, without taking it back. Acceptance: the customer, unaided, finds the device, reads its status, acknowledges an alert and, for a valve, reopens it both from the app and by its manual control. Wrong looks like: the customer watching you do it. Stop rule: if they cannot, add the family member or neighbor they name as a shared user and leave the manufacturer's quick guide at the device; record who that person is. Hazard: a manual valve override may be at floor level in a wet utility area; show it with the area dry and lit.

9. Record and close. Complete the record below before closing the job. Acceptance: every field filled, including the ones that say "declined", "marginal" or "not verified". Wrong looks like: a closed job with no account email or signal reading. Stop rule: the office does not close the job until the record is complete. Hazard: none physical; the record is what protects the customer and the shop on the night the device matters.

The record this produces

On the customer's equipment record, per device: device type and location; band and network name (not password); weakest signal reading with verdict (solid, marginal, poor); account owner's email; shared users named by the customer; dealer access scope and approval date, or "declined"; firmware version after update; alert test result with delivery time; who in the household operated it at step 8; open items. The office reads it within one business day to follow up marginal and unverified items; the next technician reads it before any service call; it is also what the handoff SOP starts from when the house sells.

A worked pass

A plumber commissions a leak hub and automatic shutoff valve at a single-story house with a crawlspace. The hub was mounted in the crawlspace beside the main.

The failure at step 2 is the one that matters. Commissioned in the crawlspace at -79 dBm, the hub would have joined, worked during the visit, and dropped on the first humid night, leaving the owner believing a leak would close the valve when the hub could not reach the app. The stop rule turned that into a conversation, and moving the hub 8 feet up through one floor gained 16 dB (from -79 to -63). The sensors talk to the hub on their own low-power radio, so their range from the closet was checked against the manufacturer's stated limit before the move, not assumed.

References

• Manufacturer installation, firmware and alert-test documentation for the specific device
• See related: Measuring Wi-Fi Signal Where the Equipment Lives; Getting a Stubborn Device onto the Customer Network
• See related: Who Owns the App Account on a Connected Device; The Customer Network Change Authorization SOP
• See related: The Connected-Device Handoff at Home Sale SOP; Leaving a Device Record the Next Tech Can Use