Local Link

Local Link enables users to open files and folders directly from Curiosity Workspaces to their local file system or network drives.

Prerequisites

  • Windows workstations for all users

  • Access to your Curiosity Workspace settings

  • Administrative privileges for initial setup and testing

  • Network file share access (if using network drives) for users

Architecture

Local Link creates a secure bridge between Curiosity Workspaces and local resources using:

  • Custom URI schemes: curiosity-open:// and curiosity-show://

  • RSA signature verification: Each link is cryptographically signed using SHA3-512 hashing

  • Workspace-specific certificates: Links only work with the matching workspace certificate

Deployment Steps

1
  • Log into your Curiosity Workspace as an administrator

  • Navigate to SettingsLocal Link Settings

  • Click on Curiosity LocalLink Release Page to download Curiosity-Link.exe https://github.com/curiosity-ai/curiosity-link/releases

  • Store the executable in a secure location accessible to your deployment system

2

Download the Workspace Certificate

  • In the same Local Link Settings page, click Download Certificate

  • This downloads your workspace-specific public key file (format: <workspace-name>.curiosity-link.public-key.pem)

  • Critical: The certificate must be in the same folder as the executable for proper operation

3

Prepare Deployment Package

Create a deployment folder containing:

deployment/
├── Curiosity-Link.exe
└── <workspace-name>.curiosity-link.public-key.pem

Both files must remain together in the same directory on each user's machine.

4

Choose Deployment Method

Select the appropriate method for your environment:

Option A: Group Policy Object (GPO)

  • Create a logon script that:

    • Copies both files to a standard location (e.g., C:\Program Files\CuriosityLink\)

    • Runs Curiosity-Link.exe register to register URI schemes

Example PowerShell logon script:

gpo-logon-script.ps1
$InstallPath = "C:\Program Files\CuriosityLink"
$SourcePath = "\\fileserver\share\CuriosityLink"

# Create directory if it doesn't exist
if (-not (Test-Path $InstallPath)) {
    New-Item -ItemType Directory -Path $InstallPath -Force
}

# Copy files
Copy-Item "$SourcePath\Curiosity-Link.exe" -Destination $InstallPath -Force
Copy-Item "$SourcePath\*.curiosity-link.public-key.pem" -Destination $InstallPath -Force

# Register URI schemes
Start-Process -FilePath "$InstallPath\Curiosity-Link.exe" -ArgumentList "register" -Wait -NoNewWindow

Option B: Software Deployment Tool

  • Use your existing software deployment solution (SCCM, Intune, etc.) to:

    1. Deploy both files to target machines

    2. Execute Curiosity-Link.exe register as a post-installation step

Option C: Manual Installation

  • For small deployments or testing:

    1. Distribute the deployment folder to users

    2. Instruct users to run Curiosity-Link.exe (without parameters)

    3. The application will register itself interactively

5

Verify Installation

  • Return to Local Link Settings in your Curiosity Workspace

  • Click Check now under "Test LocalLink"

  • Confirm the status shows as working correctly

Troubleshooting Verification:

  • Ensure Curiosity-Link.exe has been run at least once to register URI schemes

  • Verify the certificate file is in the same directory as the executable

  • Check that the certificate filename matches your workspace name

  • Confirm Windows hasn't blocked the executable

User Experience

Once deployed, users can:

  • Open files: Click Open with LocalLink in the workspace to open files in their default applications

  • Show in Explorer: Click Reveal with LocalLink workspace links to reveal files/folders in Windows File Explorer

  • Work with both local files (C:\...) and network paths (\\server\share\...)

All file operations are validated against the workspace certificate before execution.

Security Considerations

Best Practices

  • Restrict executable access: Store Curiosity-Link.exe in a protected directory (e.g., Program Files)

  • Protect the certificate: The .pem file is public but should be managed as part of your deployment

  • Test before deployment: Always validate the setup on test machines before organization-wide rollout

Support

Common Issues

"Invalid signature" error

Solution:

  • Ensure certificate matches workspace and is in same folder as executable

Files open in wrong application

Solution:

  • Windows file associations control default apps; reconfigure via Windows settings

Network paths don't work

Solution:

  • Verify user has access permissions to the network share

Testing Individual Components

# Register URI schemes
Curiosity-Link.exe register

# Run interactive mode (will register if needed)
Curiosity-Link.exe

Quick Reference

Minimum deployment requirements:

  • Curiosity-Link.exe executable

  • Matching <workspace-name>.curiosity-link.public-key.pem certificate

  • Both files in the same directory

  • Run Curiosity-Link.exe register once per machine

Supported URI schemes:

  • curiosity-open:// — opens files

  • curiosity-show:// — reveals in Explorer

Security model:

  • RSA + SHA3-512 signature verification

  • Workspace-bound certificates

  • Zero-trust link validation

Last updated