Search documentation

…plane (the collector credential issued at enrollment), and any target credentials stored in the Credential Vault that it uses to authenticate to devices during discovery and assess…

…atus This article is a concise reference. A fully expanded guide for “Credentials Failing” is scheduled in the documentation roadmap; the steps below are accurate for the current p…

Overview Storing SNMP, SSH, WinRM and API credentials safely. Documentation status This article is a concise reference. A fully expanded guide for “Cr…

…entication AIQ-SNMP-002 means the device responded but rejected the credentials presented. For SNMPv2c, confirm the community string in the credential profile matches the devic…

…backup. Add the device to AssurIQ Add the device's management IP and credentials under Network > Configuration. Verify polling and backup Confirm SNMP polling succeeds and a confi…

…ed) In Aruba Central, generate an API token for a Read-Only role. Add credentials to AssurIQ Store the relevant credential in the Credential Vault and add the device or Central acc…

Overview Scoped API keys, rotation and least privilege. Documentation status This article is a concise reference. A fully expanded guide for “Authentication…

…the domain naming context; no delegated admin rights are granted. Add credentials to the vault Store the account in AssurIQ's Credential Vault scoped to the customer and site. Enab…

…censed Security model AssurIQ authenticates with OAuth 2.0 client credentials against a dedicated Entra ID app registration. No password is stored. Every requested scope is rea…

…munities as tightly as possible. Create a credential profile SNMP credentials are stored once in the Credential Vault and reused across every device that matches the profile's…

Overview Retiring a collector is two separate actions: removing the software from the host, and revoking its credential in AssurIQ. Doing only the first leave…

…in the Credential Vault. Common errors Code Title Fix AIQ-CRD-001 Credentials failing The API token was regenerated or the trusted-host restriction changed; issue a new token a…

…ntroller, create a local administrator with the Viewer role. Generate credentials or API key Generate an API key (UniFi OS) or record the Viewer account credentials. Add the contro…

…ess. Generate API keys Generate the public/private key pair or client credentials required by the platform. Add credentials to AssurIQ Store the credentials in the Credential Vault…

Overview AIQ-RMD-005 means the remediation job executed without error, but the post-check that should confirm the fix did not pass. This is different from a j…

Overview AIQ-RMD-001 — step logs, re-run and rollback. Documentation status This article is a concise reference. A fully expanded guide for “Remediation Job…

Overview AIQ-RMD-005 — short form; see the full decision tree. Documentation status This article is a concise reference. A fully expanded guide for “Validat…

Model A credential profile stores metadata (name, kind, username, URL, rotation and expiry dates, allowed roles) that anyone with read access to the customer…

Purpose The Google Workspace connector collects user, group, 2-Step Verification and admin role evidence for organizations using Google as their identity prov…

…patch read scopes; omit remote-access and scripting scopes. Generate credentials Generate the client ID/secret or API key and store it in AssurIQ's Credential Vault. Connect in As…

…Authenticated proxies If the proxy requires authentication, embed credentials in the proxy URL (http://user:pass@proxy.internal:3128) or use a service-account credential stored…

…y scopes and cannot trigger containment, isolation or policy changes. Credentials are stored encrypted and used only over the regional Falcon API endpoint's TLS connection. Commo…

…crets are stored encrypted with an expiry reminder; certificate-based credentials are supported for longer-lived, more auditable authentication. Common errors Code Title Fix AI…

Overview The v0.1 collector talks to three POST, JSON, snake_case endpoints under /api/v1/collectors. On deployments where the main site is access-restricted,…

Overview Collectors check in with an update channel periodically and, when a new release is available and the current time is inside an allowed window, downlo…

Overview Authenticated and unauthenticated scans, scopes, schedules and safe defaults. Documentation status This article is a concise reference. A fully exp…

…and travels over HTTPS. Common errors Code Title Fix AIQ-CRD-001 Credentials failing The Auditor account password rotated; update the Credential Vault entry. Troubleshoot…

Overview Baselines, drift detection and authorized-change tagging. Documentation status This article is a concise reference. A fully expanded guide for “Con…

Overview Privileged accounts, MFA coverage, legacy auth and stale identities. Documentation status This article is a concise reference. A fully expanded gui…

Overview Scheduling, alert suppression and change authorization. Documentation status This article is a concise reference. A fully expanded guide for “Maint…