Search documentation

…atus This article is a concise reference. A fully expanded guide for “mTLS and Connectivity” is scheduled in the documentation roadmap; the steps below are accurate for the current…

…outbound-only agent with bearer-token trust toward the fully designed mTLS device-identity model and broader platform coverage. Phase Focus Phase A Outbound-only enrollment and h…

…gress path, exclude the control plane hostname from TLS inspection so mTLS is not broken. Troubleshooting If a collector goes offline immediately after a proxy configuration…

…ons: every exchange with AssurIQ is a collector-initiated mutual TLS (mTLS) session over 443. This guide takes you from choosing a form factor to confirming the first heartbeat.…

…It initiates every connection to the AssurIQ control plane over HTTPS/mTLS on port 443; the control plane never opens a connection back to the collector. No inbound firewall rules,…

…es the current proxy host, port and credentials. Certificate and mTLS rotation Each collector holds a unique client certificate issued at enrollment and rotated automaticall…

…network in plaintext; the collector sends only evidence over outbound mTLS. The account cannot modify directory objects. Common errors Code Title Fix AIQ-CRD-001 Credentials fa…

…self may be valid, but the host could not complete the outbound HTTPS/mTLS handshake to the control plane at all. Test reachability curl -v https://<control-plane-url>/healthz…

…more than 5 seconds out of sync with the control plane, which affects mTLS and heartbeat timing precision. Offline in detail A single missed heartbeat does not trigger Offli…

…: null, "client_key_pem": null, "credential_note": "bearer-token; mTLS device certificates are planned", "heartbeat_interval_s": 60, "clock_skew_tolerance_ms": 5000, "mod…