Xibo Cloud Hosting

Xibo Cloud Hosting

The easiest way to get and run a Xibo Digital Signage network is to take advantage of our managed Xibo Cloud Hosting service.

All of our Plans include Xibo Cloud Hosting which offer a range of storage and bandwidth options.

Create your Xibo CMS

  • Simply choose an instance name and select from the available domain names.

This will be used to generate your Xibo URL, for example http://instancename.xibo.co.uk/

  • Select your preferred region for your CMS deployment.

The region closest to where you and your Players are located will give the best performance!

  • Select from the range of storage and bandwidth options available.

Storage and bandwidth can be added/removed from My Account at anytime!

Our provisioning system will get to work and set everything up for you. Once completed you will see your CMS login information from the Getting Started section from your My Account dashboard:

If you do not login straight away to your CMS, you can access your login info by clicking the padlock icon for your CMS:

If you have multiple CMS instances, use the padlock found at the end of the row from the available instances:

Connect a Player

Any Xibo Player can be connected to your CMS; mix and match if needed. Select your Player from the menu to follow the installation process.

Xibo Cloud CMS Defaults and Restrictions

The Xibo CMS has certain settings pre-configured for Xibo Cloud Hosting customers, some can be changed whilst others are locked.

Default Settings that can be changed

To change the default settings listed below, use the relevant tab on the Settings page under the Administration section of the CMS main menu.

  • CMS Password Policy

We set the default Password Policy to require a password of at least 10 characters in length. It’s our view that password policies that require certain levels of complexity are great, but that length is the single most important factor when choosing a secure password.

This can be changed from the Users tab.

  • Force HTTPS connections to the CMS

For a new CMS, all connections are required to be made over HTTPS, otherwise, they’re redirected. You can turn this off at your option, but please be aware it will make your access to the CMS less secure.

Disable from the Network tab.

  • Strict Transport Security

Strict Transport Security forces browsers connecting to a website to connect only to the encrypted HTTPS version of the website for a fixed period of time, to prevent downgrade attacks on your connection. For a new CMS, we disable strict transport security by default as it can conflict with some older Player devices. You can turn this on at your option, and configure the time that the restriction should be in place for.

Enable from the Network tab.

  • Default CMS email send from address

If you hold a CMS White Label theme, we change the default email address the CMS will send email to you based upon your preferences expressed when you created the theme.

This can be viewed and changed from the Network tab.

  • Library Tidy

We turn off the Library Tidy function by default. This can be potentially destructive if you don’t understand the implication of running it with all options selected.

Library Tidy function is available from the General tab.

  • Timezone

We set a default timezone for you based upon your choice of data centre that you host your CMS in. So for example, if you choose to host your CMS in the UK, we’ll set a Europe/London timezone for you. You can change this to your local timezone if that is incorrect.

Timezone settings can be found on the Regional tab.

  • Xibo Exchange

Xibo Exchange templates are enabled by default for new Xibo Cloud Hosting customers. These can be disabled from the Applications page, Connectors section of the CMS.

  • Pixabay

Pixabay integration is enabled by default. This can be disabled from the Applications page, Connectors section of the CMS.

Default Settings that are locked

The following default settings are locked or hidden and cannot be changed. In certain cases, our support team may be able to make adjustments for you if there’s a valid use case, and if making a change won’t negatively impact the security or performance of our Cloud environment.

  • Periodic Screenshot

We disable the ability to configure the Player to send a periodic screenshot back to the CMS. We do so because this function can use very large amounts of bandwidth very quickly.

  • Currently Playing Layout

We disable the ability to configure the Player to send status updates to the CMS every time it begins playing a new Layout. This prevents you seeing the currently running layout status on the Displays page in the CMS.

Please note: This setting generates huge numbers of requests to the Cloud platform and is designed to be used only in a LAN environment!

  • Proxy Settings

CMS proxy settings are disabled and hidden since no proxy is required to access the internet from our Cloud Platform. You can still configure Player-side proxy settings on your devices as required to access our platform.

  • Dataset Size (Row Limit)

We limit datasets to 10,000 rows per dataset.

  • Maximum Statistics retention

We configure our CMS instances to archive your proof of play statistics to CSV files uploaded in your library each day, once those records are 62 days old. Statistics records are deleted when they are older than 70 days. In reality, statistics are archived to your CMS library before they get to this age, so they aren’t deleted as such.

Please note: Customers with an Enterprise plan have an increased maximum retention of 124 days.

Statistics records consume very large amounts of database storage so we aren’t able to extend these time periods.

CMS versions prior to 2.3.0 have the above limits set to 30 days and 40 days respectively.

From CMS version 2.3.11 onward, proof of play statistics that are older than the maximum statistics retention time will not be accepted in to the CMS. You should ensure that your devices have the correct date and time to avoid any issues.


  • Task Configuration

The system task configuration is locked as these have been optimally configured for you.

NOTE: The fetch remote DataSet task is run hourly by default. Remote DataSets are intended for data which updates infrequently and not real time.

  • Modules

We prevent the installation of modules with Xibo Cloud Hosting. Any of the stock Modules that ship with Xibo can be installed for you if they aren’t installed already. Your own third-party Modules cannot be installed.

  • XMR Configuration

We pre-configure, lock and hide the XMR configuration as you don’t need to set that up yourself.

  • If you want to turn XMR off for one or more Players, you can do so at the Display Profile settings by entering DISABLED in to the XMR Public Address field.

  • File Download Mode and associated settings

These settings are pre-configured for you to give the best performance.

  • System Limits

We limit the number of Displays that can be authorised on the CMS, the size of the CMS library, and the total amount of bandwidth that can be consumed based upon what you have purchased. You can change these limits by purchasing more bandwidth/storage from My Account at anytime.

  • Maximum File Upload Size

This is fixed at 1999MB or 4GB for v2.x CMS instances onwards.

  • Loadbalancer Whitelist

We fix and hide the loadbalancer whitelist setting as there is no need to change this value on our cloud platform.

  • Log Retention

We fix general system log retention at 4 days. Error messages etc are rarely useful after that time period. Old log messages are deleted.

  • Audit log Retention

Audit log messages are automatically deleted according to your plan limits.

30 days Professional / 90 days Business / 1 year Enterprise

  • Disable Import

The database import function is disabled as this could be used to circumvent restrictions described in this article. If you would like to bring an existing database with you when moving to Xibo Cloud Hosting, please discuss with our Support team so they can make the necessary arrangements.

  • Themes

The theme settings are hidden in the CMS. On Cloud, you will use the standard Xibo theme unless you’ve purchased a CMS white label from us. In that case, we pre-configure the theme settings for you.

  • OpenWeather API Key

The API keys for the OpenWeather integration for the Weather module are pre-populated and hidden, so you don’t need to sign up for your own account. We cache weather forecast data for each location for 4 hours, and current weather conditions for 1 hour as a minimum.

  • Twitter/Twitter Metro API Key

We partially configure the Twitter/Twitter Metro module for you, so that you’re able to connect to your Twitter account without needing to sign up for your own API keys. We cache requests to the Twitter search API for 1 hour.

  • Currencies and Stocks API Keys

The API keys for the Currencies and Stocks modules are pre-populated and hidden so you won’t need to sign up for your own account with those providers. We cache responses to these for 4 hours.

  • Pixabay API Key

The API keys for Pixabay are pre-populated and hidden so you won’t need to sign up for your own account.

  • Canva connection credentials

The Canva Client ID and Client Secret are pre-populated.

  • Library Directory

The CMS library directory is pre-configured and cannot be modified.

  • API / XMDS Rate Limits

To ensure that the Xibo Cloud Hosting service remains performant for all our users, we do impose some basic rate limiting on your connections to the CMS. Where you interact with the CMS API, you may receive an error 429 if you exceed the rate limit. In that case, you should slow your overall request rate down.

Library and Bandwidth Limits

Monthly storage and bandwidth limits are based on Plan type:

Plan Cloud Storage Cloud Bandwidth
Professional 1GB 4GB
Business 1.5GB 6GB
Enterprise 2GB 8GB

You can increase these limits by purchasing more bandwidth/storage from My Account at anytime.

Instance Management

Manage all aspects of your CMS Instance from My Account.

Backing up your CMS/Database

Xibo Cloud Hosting customer accounts are backed up automatically daily as part of the hosting service provided.