• About this guide
  • About Cryptographic Security Platform
  • About CSP Compliance Manager
  • Release notes
    • CSP Compliance Manager 10.6.1 release notes
      • Supported upgrade versions
      • New features in 10.6.1
        • New features in CSP Compliance Manager 10.6.1
        • New features in CSP Discovery 10.6.1
      • Fixed bugs for 10.6.1
      • Known limitations in 10.6.1
        • Known limitations in Compliance Manager 10.6.1
        • Known limitations in CSP Discovery 10.6.1
    • CSP Compliance Manager 10.6.1 P1 Patch Release Notes
  • Installation and upgrade
    • Installation
      • Installation Requirements
        • System resource Recommendations
        • Supported Platforms
        • Network Requirements
        • Browser Requirements
      • Deployment
        • Installing from an OVA
        • Installing from an ISO
          • Installing the first node from an ISO Image
          • Initializing the web GUI
          • Joining a node from an ISO image
        • Installing from an AMI
          • Starting the AWS Instance
          • Associating an Elastic IP Address
          • Configuring a node in AWS
          • Creating an AWS instance
        • Deploying in Microsoft Azure
          • Overview for Microsoft Azure deployment
          • Recommendations
          • Deploying a node in Azure
          • Configuring the First Node in Azure
          • Configuring Additional Nodes in Azure
        • Setting the System Console password
        • Setting Up the webGUI
    • Upgrading
      • Upgrading requirements
      • Running the upgrade
  • User guide
    • Using the Compliance Manager interface
    • Collections and Data Sources
      • Managing Data Sources
      • Disconnecting or Reconnecting a Data Source Connection
      • Moving a Data Source to a Different Collection
      • Viewing Connected Data Source Connections
      • Editing Data Source Details
      • Deleting a Data Source from a Collection
      • Creating a Data Source Connection
      • Deleting a Collection
      • Editing a Collection
      • Creating a Collection
      • Viewing Collections
      • About Collections and Data Sources
    • Cryptographic Assets
      • Sending Documentation Requests
      • Documenting Cryptographic Assets
      • Viewing Cryptographic Assets
      • About Cryptographic Assets
    • Cryptography Bill of Materials
      • About Cryptography Bill of Materials
      • Importing a CBOM File
      • Exporting a CBOM File
    • Agentic AI Governance
      • Understanding Agentic AI Governance
      • Improving Agent Readiness
    • Tags
      • About Tags
      • Creating a Tag
      • Adding a Tag
      • Editing a Tag
      • Deleting a Tag
    • Reports
      • Deleting a Report
      • Editing a Report
      • Creating a Report
      • Viewing Reports
    • Risk
      • Understanding Risk
      • Viewing the Risk Landscape
      • Viewing Risk Details
      • Reviewing Security Recommendations
    • Compliance
      • Deleting a Schedule
      • Editing a Schedule
      • Manually Running a Schedule
      • Creating a Schedule
      • About Schedules
      • Deleting a Custom Compliance Policy
      • Modifying an Existing Compliance Policy
      • Creating a Compliance Policy
      • Post-Quantum Compliance
      • Viewing Compliance Policies
      • About Compliance
    • Documentation
      • Deleting a Custom Template
      • Modifying a Template
      • Assigning a Documentation Template
      • Creating a Documentation Template
      • Viewing Documentation Templates
      • About Documentation
    • Appliance Clusters
      • About Appliance Clusters
      • Creating an Appliance Cluster Connection
      • Viewing Appliance Cluster Details
    • Compliance Manager Authentication and Settings
      • Configuring OpenID Connect
      • Reconfiguring Active Directory
      • Configuring Active Directory
      • Adding and Deleting Local Users
      • Single Sign-On (SSO) Authentication
      • Adding and Removing Active Directory (AD) Members
      • Inviting and Removing Local Authentication or OpenID Connect (OIDC) Members
      • Adding an Image
    • Licensing and Entitlements
      • About Licenses and Entitlements
      • Adding a License
      • Viewing Entitlements and Licenses
    • External Authentication Providers
      • Example: Configuring Azure OIDC to use with CSP Compliance Manager
      • Example: Configuring Entrust Identity as a Service
    • System Console
      • Exiting the Console
      • Manage Timeouts and Appearance
      • Recover Compliance Manager Cluster
      • Delete CSP Compliance Manager Snapshots
      • Change the secroot Account
      • Manage Read Only Support Access
      • Manage Full Support Access
      • Manage htadmin Account and SSH Access
      • Manage your Network Settings
        • Manage Your Static Routes
        • Test Your Network Connectivity
      • Setting Console Settings
      • Using the CSP Compliance Manager System Console
      • Accessing the System Console
  • Cluster management
    • Cryptographic Security Platform Compliance Manager Nodes and Clusters
    • Viewing Cluster Status
    • Adding a Node to an Existing Cluster in vSphere
    • Removing a Node from a Cluster
    • Joining or Rejoining a Compliance Manager Cluster
      • Joining a Compliance Manager Cluster
      • Rejoining a Compliance Manager Cluster
    • Changing the IP Address for a Node
    • Rebooting a Compliance Manager Node
    • Decommissioning a Compliance Manager Node
    • Compliance Manager Backup and Restore
      • Backing Up Using the Compliance Manager webGUI
      • Accessing Compliance Manager Backup Files
      • Restoring Cryptographic Security Platform Compliance Manager
      • Creating a Backup User
    • Startup Authentication
      • Enabling Startup Authentication
      • Disabling Startup Authentication
  • Account Settings
    • Changing your account settings
    • Admin Keys
      • Generating the Admin Key
      • Downloading your Admin Key
      • Verifying the Admin Key
    • Configuring Local Authentication
    • Enabling Two Factor Authentication
    • Managing Two-Factor Authentication
    • Setting Mail Server Preferences
    • Recovering Access to Cryptographic Security Platform Compliance Manager
  • System Maintenance and Troubleshooting
    • Configuring System-Level SNMP Traps
    • Configuring Syslog server aettings
    • Setting the Default Account Expiration
    • Increasing CSP Compliance Manager Storage in a VM
    • Setting the Compliance Manager webGUI Session Timeout
    • Configuring TLS
    • Creating a Support Bundle with the Compliance Manager webGUI
    • Creating a Support Bundle for the Compliance Manager System Console
    • Using the Restricted Shell
    • Setting Console Manager webGUI Alert Settings
    • Enabling or Disabling the Support Login
    • nShield KeySafe5 Requirements
    • nShield KeySafe5 Settings
  • Certificates
    • Cryptographic Security Platform Compliance Manager Certificates
    • Viewing the Expiration Date for the Current SSL Certificate
    • Creating a Certificate Signing Request
    • Using Self-Signed Certificates for All Nodes in a Cluster
    • Installing External Certificates for Internal and External Webservers
    • CSP Compliance Manager Certificate Expiration Notification
    • Installing a New Self-Signed Certificate
    • Downloading a CSP Compliance Manager CA Certificate
  • Using the audit log
    • Configuring Audit Log Settings
    • Viewing the audit log
    • Exporting the audit log
  • Web GUI reference
    • Cluster Page
    • Audit Log Page
    • Alerts Page
    • Settings Page
    • System Upgrade Page
    • System Upgrade Page Details
  • Tenant management
    • Creating the default tenant
    • Creating additional tenants
    • Modifying a Tenant
    • Changing the default tenant
    • Resending an invite to a tenant
    • Recovering the tenant password
    • Deleting a CSP Compliance Manager tenant
  • Customer License
  • Using CSP Discovery
    • Accessing the Discovery User Interface
    • Discovery Dashboard
    • Discovery Configurations
      • Discovery Filter options
      • Discovery Insights panel
      • Discovery Content Area
        • Editing an Existing Configuration
        • Scheduling Automatic Runs
        • Manually Running a Configuration
        • Creating a New Configuration
        • Deleting a Configuration
    • Discovery Settings
    • Discovery Vault Connections
    • Discovery Certificate Domains
    • Discovery Plugins Overview
      • AWS Certificate Manager Plugin
      • AWS Key Management Service Plugin
      • AWS Secrets Manager Plugin
      • AWS CloudFront Plugin
      • AWS Elastic Load Balancer Plugin
      • AWS CloudHSM Plugin
      • Azure Key Vault Plugin
      • GCP Certificate Manager Plugin
      • GCP Key Management Service Plugin
      • GCP Secret Manager Plugin
      • HashiCorp Vault Plugin
      • Network Scanner - TLS Plugin
      • Network Scanner - OIDC Plugin
      • Network Scanner - SSH Plugin
      • Tenable Vulnerability Management Plugin
      • Filesystem Scanner Plugin
      • Qualys CertView Plugin
      • Qualys TotalCloud Plugin
      • Qualys Container Security Plugin
      • Tenable Security Center Plugin
      • Microsoft Defender for Endpoint Certificate Plugin
      • Jenkins Rest Plugin
      • Jenkins Script Plugin
      • Veeam Backup and Replication Plugin
      • Nutanix Prism Element Discovery Plugin
      • Nutanix Prism Central Discovery Plugin
      • Azure AI Foundry Discovery Plugin
      • ServiceNow Discovery Plugin
    • Managing Discovery Plugins
      • Plugin Configuration
        • AWS Certificate Manager Plugin Configuration
          • AWS Certificate Manager Plugin Credentials
          • AWS Certificate Manager Plugin Settings
            • Required AWS Certificate Manager Plugin Settings
            • Optional AWS Certificate Manager Plugin Settings
        • AWS Key Management Service Plugin Configuration
          • AWS Key Management Service Plugin Credentials
          • AWS Key Management Service Plugin Settings
            • Required AWS Key Management Service Plugin Settings
            • Optional AWS Key Management Service Plugin Settings
        • AWS Secrets Manager Plugin Configuration
          • AWS Secrets Manager Plugin Credentials
          • AWS Secrets Manager Plugin Settings
            • Required AWS Secrets Manager Plugin Settings
            • Optional AWS Secrets Manager Plugin Settings
        • AWS CloudFront Plugin Configuration
          • AWS CloudFront Plugin Credentials
          • AWS CloudFront Plugin Settings
            • Required AWS CloudFront Plugin Settings
            • Optional AWS CloudFront Plugin Settings
        • AWS Elastic Load Balancer Plugin Configuration
          • AWS Elastic Load Balancer Plugin Credentials
          • AWS Elastic Load Balancer Plugin Settings
            • Required AWS Elastic Load Balancer Plugin Settings
            • Optional AWS Elastic Load Balancer Plugin Settings
        • AWS CloudHSM Plugin Configuration
          • AWS CloudHSM Plugin Credentials
          • AWS CloudHSM Plugin Settings
            • Required AWS CloudHSM Plugin Settings
            • Optional AWS CloudHSM Plugin Settings
        • Azure AI Foundry Discovery Plugin Configuration
          • Azure AI Foundry Discovery Plugin Credentials
          • Azure AI Foundry Discovery Plugin Settings
            • Required Azure AI Foundry Discovery Plugin Settings
            • Optional Azure AI Foundry Discovery Plugin Settings
        • Azure Key Vault Plugin Configuration
          • Azure Key Vault Azure Plugin Credentials
            • Creating Azure Key Vault credentials with the Azure CLI
            • Creating Azure Key Vault credentials with the web console
          • Azure Key Vault Plugin Settings
        • GCP Certificate Manager Plugin Configuration
          • GCP Certificate Manager Plugin Credentials
          • GCP Certificate Manager Plugin Settings
        • GCP Key Management Service Plugin Configuration
          • GCP Key Management Service Plugin Credentials
          • GCP Key Management Service Plugin Settings
            • Required GCP Key Management Service Plugin Settings
        • GCP Secret Manager Plugin Configuration
          • GCP Secret Manager Plugin Credentials
          • GCP Secret Manager Plugin Settings
        • HashiCorp Vault Plugin Configuration
          • HashiCorp Vault Plugin Credentials
          • HashiCorp Vault plugin settings
            • Required HashiCorp Vault Plugin Settings
            • Optional HashiCorp Vault Plugin Settings
        • Network Scanner - TLS Plugin Configuration
          • Network Scanner - TLS Plugin Credentials
          • Network Scanner - TLS Plugin Settings
            • Required Network Scanner - TLS Plugin Settings
            • Optional Network Scanner - TLS Plugin Settings
        • Network Scanner - OIDC Plugin Configuration
          • Network Scanner - OIDC Plugin Credentials
          • Network Scanner - OIDC Plugin Settings
            • Required Network Scanner - OIDC Settings
            • Optional Network Scanner - OIDC Settings
        • Network Scanner - SSH Scanner Plugin Configuration
          • Network Scanner - SSH Plugin Credentials
          • Network Scanner - SSH Plugin Settings
            • Required Network Scanner - SSH Plugin Settings
            • Optional Network Scanner - SSH Plugin Settings
        • Tenable Vulnerability Management Plugin Configuration
          • Tenable Vulnerability Management Plugin Credentials
          • Tenable Vulnerability Management Plugin Settings
            • Required Tenable Vulnerability Management Plugin Settings
            • Optional Tenable Vulnerability Management Plugin Settings
        • Filesystem Scanner Plugin Configuration
          • Filesystem Scanner Plugin Settings
            • Required Filesystem Scanner Plugin Settings
            • Optional Filesystem Scanner Plugin Settings
        • Qualys TotalCloud Plugin Configuration
          • Qualys TotalCloud Plugin Settings
            • Required Qualys TotalCloud Plugin Settings
        • Qualys CertView Plugin Configuration
          • Qualys CertView Plugin Settings
            • Required Qualys CertView Plugin Settings
            • Optional Qualys CertView Plugin Settings
        • Qualys Container Security Plugin Configuration
          • Qualys Container Security Plugin Settings
            • Required Qualys Container Security Plugin Settings
            • Optional Qualys Container Security Plugin Settings
        • Tenable Security Center Plugin Configuration
          • Tenable Security Center Plugin Settings
            • Required Tenable Security Center Plugin Settings
        • Jenkins Credentials Plugin (REST API) Configuration
          • Jenkins Credentials Plugin (REST API) Credentials
          • Jenkins Credentials Plugin (REST API) Plugin Settings
        • Microsoft Defender for Endpoint Certificate Plugin Configuration
          • Microsoft Defender for Endpoint Certificate Plugin Credentials
          • Microsoft Defender for Endpoint Certificate Plugin Settings
            • Required Microsoft Defender for Endpoint Certificate Plugin Settings
            • Optional Microsoft Defender for Endpoint Certificate Plugin Settings
        • Veeam Backup and Replication Plugin Configuration
          • Veeam Backup and Replication Plugin Credentials
          • Veeam Backup and Replication Plugin Settings
            • Required Veeam Backup and Replication Plugin Settings
            • Optional Veeam Backup and Replication Plugin Settings
        • Jenkins Script Plugin Configuration
          • Jenkins Script Plugin Credentials
          • Jenkins Script Plugin Settings
            • Jenkins Script Plugin Required
            • Jenkins Script Plugin Optional
        • Nutanix Prism Element Discovery Plugin Configuration
          • Nutanix Prism Element Discovery Plugin Settings
            • Required Nutanix Prism Element Discovery Plugin Settings
        • Nutanix Prism Central Discovery Plugin Configuration
          • Nutanix Prism Central Discovery Plugin Settings
            • Required Nutanix Prism Central Discovery Plugin Settings
        • ServiceNow Discovery Plugin Configuration
          • ServiceNow Discovery Plugin Credentials
          • ServiceNow Discovery Plugin Settings
            • Required ServiceNow Discovery Plugin Settings
      • Schedule
      • Validation results
    • Discovery Plugins Output
      • AWS Certificate Manager Plugin Output
      • AWS Key Management Service Plugin Output
      • AWS Secrets Manager Plugin Output
      • AWS CloudFront Plugin Output
      • AWS Elastic Load Balancer Plugin Output
      • AWS CloudHSM Plugin Output
      • Azure Key Vault Plugin Output
      • GCP Certificate Manager Plugin Output
      • GCP Key Management Service Plugin Output
      • GCP Secret Manager Plugin Output
      • HashiCorp Vault Plugin Output
      • Network Scanner - TLS Plugin Output
      • Network Scanner - OIDC Plugin Output
      • Network Scanner - SSH Plugin Output
      • Tenable Vulnerability Management Plugin Output
      • Filesystem Scanner Plugin Output
      • Qualys CertView Plugin Output
      • Qualys TotalCloud Plugin Output
      • Qualys Container Security Plugin Output
      • Tenable Security Center Plugin Output
      • Microsoft Defender for Endpoint Certificate Plugin Output
      • Jenkins Script Plugin Output
      • Jenkins Rest Plugin Output
      • Veeam Backup and Replication Plugin Output
      • Nutanix Prism Element Discovery Plugin Output
      • Nutanix Prism Central Discovery Plugin Output
      • Azure AI Foundry Discovery Plugin Output
      • ServiceNow Discovery Plugin Output