Device object

Defines the data necessary for Trust Protection Platform to identify and connect to a network device.

Device object

Attribute

Description

Agentless Discovery Stage

UI: SSH Scan Status
Required: No

Policy Definable: No. Default: NA

The status or stage for an agentless Discovery job:

  • Aborted: The Discovery job was canceled.
  • Added: The Discovery job is pending.
  • Error: The Discovery job failed due to an error.
  • Finished: The Discovery job completed successfully.
  • Started: The Discovery job is in progress.

Agentless Discovery Status

UI: NA
Required: No

Policy Definable: No. Default: NA

The status of agentless key discovery.

Allow Agentless Discovery and Remediation

UI: NA
Required: No

Policy Definable: No. Default: Yes

Allow agentless access for SSH key discovery and remediation:

Yes = Allow agentless access for SSH key discovery and remediation for this device.

No = Prevent agentless access for SSH key discovery and remediation for this device.

Approver

UI: NA
Required: No

Policy Definable: No. Default: NA

The identity of a workflow approver. Applies to certificates, applications, and trust stores.

Bulk Provisioning Dn

UI: NA
Required: No

Policy Definable: No. Default: NA

Internal use only. The Bulk Provisioning Job Distinguished Name (DN) that most recently provisioned certificates to the device.

Bulk Provisioning Stage

UI: NA
Required: No

Policy Definable: No. Default: NA

Internal use only. One of the following values: Aborted, Added, Error, Finished, Retry, Started.

Bulk Provisioning Status

UI: Bulk Provisioning Status
Required: No

Policy Definable: No. Default: NA

Read-only. The status of a provisioning certificates and keys to multiple devices:

  • Bulk Application Base
  • Bulk Provisioning To Do
  • Provisioning Work To Do
  • Bulk Provisioning Dn
  • Bulk Provisioning Status
  • Bulk Provisioning Stage
  • In Progress
  • Stop Requested
  • Last Update
  • Last Run
  • Certificate Thumbprint
  • Light Run New Certificates Threshold
  • Batch Size

Client ID

UI: Client Account
Required: No

Policy Definable: No. Default: NA

Internal use only. The unique identifier of an Agent that is registered with a Trust Protection Platform server.

Client Machine ID

UI: NA
Required: No

Policy Definable: No. Default: NA

Internal use only.

Cloud Instance ID

UI: NA
Required: No

Policy Definable: No. Default: NA

The unique cloud instance ID.

Cloud Region

UI: NA
Required: No

Policy Definable: No. Default: NA

The geographic location where the cloud service instance resides. An instance in AWS can only exist in a single region.

Cloud Service

UI: NA
Required: No

Policy Definable: No. Default: NA

An Amazon E2C cloud service.

Created By

UI: Created By
Required: No

Policy Definable: No. Default: NA

The Trust Protection Platform version that created the Device object.

Deny Multiple Authentication Failures

UI: Deny Multiple Authentication Failures
Required: Yes

Policy Definable: Yes. Default: NA

The setting to control brute force attempts on a device. A value of 1 denies authentication after multiple failures.

Disabled On

UI: NA
Required: No

The date the Discovery job was disabled.

Discovered By DN

UI: NA
Required: No

Policy Definable: No. Default: NA

The Discovery job (Distinguished Name).

Jump Server DN

UI: Yes
Required: No

Policy Definable: Yes. Default: NA

The Trust Protection Platform DN of a Jump Server object that acts as an intermediary to get around a firewall. Trust Protection Platform connects to the jump server via SSH and then initiates a second SSH connection from the jump server to the managed device to perform its management operations. If this attribute is not assigned, Trust Protection Platform communicates directly with the device.

Last Attempt To Get Client Subsystem Record

UI: Last Seen On
Required: No

Deprecated.

Last Discovery Date

UI: Last Discovery Date
Required: No

Policy Definable: No. Default: NA

The date and time of the most recent SSH Discovery job.

Last Discovery Planned

UI: NA
Required: No

Deprecated

Last Discovery Platform Version

Last Discovery Platform Version

No

Policy Definable: No. Default: NA

Read-only. The Platform version that performed the last certificate discovery.

Last File Operations Platform Version

UI: Last File Operations Platform Version
Required: No

Policy Definable: No. Default: NA

Read-only. The Platform version that performed the last certificate discovery.

Location

UI: Location
Required: No

Policy Definable: No. Default: NA

The place where the device is operating.

Manual Approval

UI: NA
Required: No

Policy Definable: No. Default: NA

The way a certificate or key renews:

  • 0 = Automatic certificate or key renewal.
  • 1 = Manual certificate or key renewal by an administrator.

Maximum Authorizations Per Keyset

UI: Maximum Authorizations Per Keyset
Required: No

Policy Definable: No. Default: NA

The maximum number of user authorizations for the keyset.

Onboard Discovery Dn

UI: NA
Required: No

Policy Definable: No. Default: NA

 

Onboard Discovery Stage

UI: NA
Required: No

Policy Definable: No. Default: NA

The status or stage for an onboard Discovery job:

  • Added: The Discovery job is pending.
  • Started: The Discovery job is in progress.
  • Finished: The Discovery job completed successfully.
  • Error: The Discovery job failed due to an error.
  • Aborted: The Discovery job was canceled.

Onboard Discovery Status

UI: NA
Required: No

Policy Definable: No. Default: NA

The Discovery status for a device: Complete, Failed, Pending, Running, Undefined, Unscanned

Onboard Discovery To Do

UI: To Do
Required: No

Policy Definable: No. Default: NA

Shows the status of an executing Onboard Discovery job. Values:

0 = Onboard Discovery job completed for a device.

1 = Awaiting processing by an executing Onboard Discovery job.

Placement Job Dn

UI: NA
Required: No

Policy Definable: No. Default: NA

The Distinguished Name (DN) for the Network Discovery job that created the device.

Previous Connection Credential Hash

UI: NA
Required: No

Policy Definable: No. Default: NA

The hash of the previous authentication credential.

Privilege Elevation Command

UI: NA
Required: No

Policy Definable: No. Default: NA

The command to elevate privileges during SSH discovery and remediation.

Protection Key

UI: NA
Required: No

Policy Definable: No. Default: NA

The protection key used for encrypting the certificate.

Required Sync Confirmation

UI: Manual Sync Confirmation Required
Required: No

Policy Definable: No. Default: 0

On a manual key rotation, the setting to control whether to wait for a sync confirmation. before proceeding with the rotation. A value of 1 requires manual synchronization between the server that store keys and the target devices. For example, point of sale (POS) terminals.

SSH Key Encryption

UI: NA
Required: No

Policy Definable: No. Default: NA

The encryption key to use to store keys in the Secret Store.

Status

UI: NA
Required: No

Policy Definable: No. Default: NA

The device status. For more information, see SSH Process status result codes.

System Owned Keys

UI: NA
Required: No

Policy Definable: No. Default: NA

The system-owned device keys.