About this guide
About CSP Compliance Manager
Using the Compliance Manager interface
Collections and Data Sources
Managing Data Sources
Disconnecting or Reconnecting a Data Source Connection
Moving a Data Source to a Different Collection
Viewing Connected Data Source Connections
Editing Data Source Details
Deleting a Data Source from a Collection
Creating a Data Source Connection
Deleting a Collection
Editing a Collection
Creating a Collection
Viewing Collections
About Collections and Data Sources
Cryptographic Assets
Sending Documentation Requests
Documenting Cryptographic Assets
Viewing Cryptographic Assets
About Cryptographic Assets
Reports
Deleting a Report
Editing a Report
Creating a Report
Viewing Reports
Compliance
Deleting a Schedule
Editing a Schedule
Manually Running a Schedule
Creating a Schedule
About Schedules
Deleting a Custom Compliance Policy
Modifying an Existing Compliance Policy
Creating a Compliance Policy
Post-Quantum Compliance
Viewing Compliance Policies
About Compliance
Documentation
Deleting a Custom Template
Modifying a Template
Assigning a Documentation Template
Creating a Documentation Template
Viewing Documentation Templates
About Documentation
Appliance Clusters
About Appliance Clusters
Creating an Appliance Cluster Connection
Viewing Appliance Cluster Details
Compliance Manager Authentication and Settings
Configuring OpenID Connect
Reconfiguring Active Directory
Configuring Active Directory
Adding and Deleting Local Users
Single Sign-On (SSO) Authentication
Adding and Removing Active Directory (AD) Members
Inviting and Removing Local Authentication or OpenID Connect (OIDC) Members
Adding an Image
Licensing and Entitlements
About Licenses and Entitlements
Adding a License
Viewing Entitlements and Licenses
External Authentication Providers
Example: Configuring Azure OIDC to use with CSP Compliance Manager
Example: Configuring Entrust Identity as a Service
System Console
Exiting the Console
Manage Timeouts and Appearance
Recover Compliance Manager Cluster
Delete CSP Compliance Manager Snapshots
Change the secroot Account
Manage Read Only Support Access
Manage Full Support Access
Manage htadmin Account and SSH Access
Manage your Network Settings
Manage Your Static Routes
Test Your Network Connectivity
Setting Console Settings
Using the CSP Compliance Manager System Console
Accessing the System Console
Using CSP Discovery
Discovery Dashboard
Discovery configurations
Discovery Insights panel
Discovery Filter options
Discovery Content Area
Editing an Existing Configuration
Manually Running a Configuration
Scheduling Automatic Runs
Creating a New Configuration
Deleting a Configuration
Discovery Settings
Managing Discovery Plugins
Plugin Configuration
AWS Certificate Manager plugin configuration
AWS Certificate Manager plugin credentials
AWS Certificate Manager plugin settings
Required AWS Certificate Manager plugin settings
Optional AWS Certificate Manager plugin settings
AWS Key Management Service plugin configuration
AWS Key Management Service plugin credentials
AWS Key Management Service plugin settings
Required AWS Key Management Service plugin settings
Optional AWS Key Management Service plugin settings
AWS Secrets Manager plugin configuration
AWS Secrets Manager plugin credentials
AWS Secrets Manager plugin settings
Required AWS Secrets Manager plugin settings
Optional AWS Secrets Manager plugin settings
AWS CloudFront plugin configuration
AWS CloudFront plugin credentials
AWS CloudFront plugin settings
Required AWS CloudFront plugin settings
Optional AWS CloudFront plugin settings
AWS Elastic Load Balancer plugin configuration
AWS Elastic Load Balancer plugin credentials
AWS Elastic Load Balancer plugin settings
Required AWS Elastic Load Balancer plugin settings
Optional AWS Elastic Load Balancer plugin settings
Azure Key Vault plugin configuration
Azure Key Vault plugin credentials
Creating Azure Key Vault credentials with the Azure CLI
Creating Azure Key Vault credentials with the web console
Azure Key Vault plugin settings
GCP Certificate Manager plugin configuration
GCP Certificate Manager plugin credentials
GCP Certificate Manager plugin settings
GCP Key Management Service plugin configuration
GCP Key Management Service plugin credentials
GCP Key Management Service plugin settings
Required GCP Key Management Service plugin settings
Optional GCP Key Management Service plugin settings
GCP Secret Manager plugin configuration
GCP Secret Manager plugin credentials
GCP Secret Manager plugin settings
HashiCorp Vault plugin configuration
HashiCorp Vault plugin credentials
HashiCorp Vault plugin settings
Required HashiCorp Vault plugin settings
Optional HashiCorp Vault plugin settings
Network Scanner - TLS plugin configuration
Network Scanner - TLS plugin credentials
Network Scanner - TLS plugin settings
Required Network Scanner - TLS plugin settings
Optional Network Scanner - TLS plugin settings
Network Scanner - OIDC plugin configuration
Network Scanner - OIDC plugin credentials
Network Scanner - OIDC plugin settings
Required Network Scanner - OIDC settings
Optional Network Scanner - OIDC settings
Network Scanner - SSH Scanner plugin configuration
Network Scanner - SSH plugin credentials
Network Scanner - SSH plugin settings
Required Network Scanner - SSH plugin settings
Optional Network Scanner - SSH plugin settings
Tenable Vulnerability Management plugin configuration
Tenable Vulnerability Management plugin credentials
Tenable Vulnerability Management plugin settings
Required Tenable Vulnerability Management plugin settings
Optional Tenable Vulnerability Management plugin settings
Qualys CertView plugin configuration
Qualys CertView plugin credentials
Qualys CertView plugin settings
Required Qualys CertView plugin settings
Optional Qualys CertView plugin settings
Schedule
Validation results
Discovery Plugins Output
AWS Certificate Manager plugin output
AWS Key Management Service plugin output
AWS Secrets Manager plugin output
AWS CloudFront plugin output
AWS Elastic Load Balancer Plugin output
AWS CloudHSM plugin output
Azure Key Vault plugin output
GCP Certificate Manager plugin output
GCP Key Management Service plugin output
GCP Secret Manager plugin output
HashiCorp Vault plugin output
Network Scanner - TLS plugin output
Network Scanner - OIDC plugin output
Network Scanner - SSH plugin output
Tenable Vulnerability Management plugin output
Filesystem Scanner plugin output
Qualys CertView plugin output
Qualys TotalCloud plugin output
Qualys Container Security plugin output
Tenable Security Center plugin output
Microsoft Defender plugin output
Jenkins Script Plugin output
Jenkins Rest Plugin output
Veeam Backup and Replication Plugin output
Nutanix Prism Element Discovery plugin output
Nutanix Prism Central Discovery plugin output
Plugin reference
AWS Certificate Manager plugin
AWS Key Management Service plugin
AWS Secrets Manager plugin
AWS CloudFront plugin
AWS Elastic Load Balancer plugin
AWS CloudHSM Plugin
Azure Key Vault plugin
GCP Certificate Manager plugin
GCP Key Management Service plugin
GCP Secret Manager plugin
HashiCorp Vault plugin
Network Scanner - TLS plugin
Network Scanner - OIDC plugin
Network Scanner - SSH plugin
Tenable Vulnerability Management plugin
Filesystem Scanner Plugin
Qualys CertView Plugin
Qualys TotalCloud plugin
Qualys Container Security Plugin
Tenable Security Center Plugin
Microsoft Defender Plugin
Jenkins Script Plugin
Veeam Backup and Replication Plugin
Nutanix Prism Element Discovery Plugin
Nutanix Prism Central Discovery Plugin