Search documentation

Overview Enrollment is the one-time exchange of a random, single-use, short-lived enrollment token for a permanent coll…

Overview Create, scope, expire and revoke enrollment tokens. Documentation status This article is a concise reference. A fully expanded guide for “Enr…

…64 host or VM for now. Download the installer Generate a one-time enrollment token from the site's collector setup page — this also gives you the exact download link and comman…

…lector \ --network host \ --restart unless-stopped \ -e ASSURIQ_ENROLLMENT_TOKEN="<one-time-token>" \ -e ASSURIQ_URL="<control-plane-url>" \ -v assuriq-collector-data:/va…

…n 5 minutes Host down, service stopped, or network/egress path broken Enrollment Pending Installed but has not completed its first successful enrollment exchange Invalid, expired o…

…ollectors/enroll /api/public/v1/collectors/enroll Exchange a one-time enrollment token for a collector identity and credential POST /api/v1/collectors/heartbeat /api/public/v1/coll…

…PC, or a dedicated VM. Avoid laptops that sleep or roam. Create an enrollment token From the site's Collectors panel, generate a token scoped to that site. Tokens are single-u…

Overview The Linux package installs the collector as a systemd unit that starts on boot and restarts automatically if it exits unexpectedly. Linux ARM64 is…

Overview The AssurIQ Endpoint Agent is an architecture, not a rebrand: the collector you deploy today is its first form. The agent is modelled as seven capabi…

…rotation Each collector holds a unique client certificate issued at enrollment and rotated automatically before expiry. If the host clock is significantly wrong, or the collector…

…login audit events admin.security.readonly — read 2-Step Verification enrollment Setup Create a service account In Google Cloud Console, create a service account and enable dom…

…model pending full certificate lifecycle tooling. Credentials and enrollment tokens are independent of each other by design: a credential can be revoked at any time without nee…

…al configuration. Required endpoints Purpose Direction Port Notes Enrollment and heartbeat Outbound only 443/TCP mTLS to the control plane Evidence and scan result upload Outbo…

…Windows Set proxy at install time AssurIQCollectorSetup.exe /quiet ENROLLMENT_TOKEN=<token> ASSURIQ_URL=<control-plane-url> PROXY_URL=http://proxy.internal:3128 To change the…

…rather than restoring a backup that contains the old credential. Re-enrollment after revocation A revoked collector credential can never be reactivated. If the same site needs…

…ty with the AssurIQ control plane (the collector credential issued at enrollment), and any target credentials stored in the Credential Vault that it uses to authenticate to devices…

…erm design are not mistaken for current behavior. Supported today Enrollment, heartbeat and observation reporting to the AssurIQ control plane over the API v1 endpoints Explici…