TMAegis
Više pravila za ibmcloud

TMA-IBMCLOUD-8.2.1

Ensure certificates imported into or generated through IBM Cloud® Secrets Manager are automatically renewed before expiration

SrednjaNivo 1Ručni pregledibmcloud

Opis

You can use the IBM Cloud Secrets Manager service dashboard to set the renewable period for the certificates that you manage in the Secrets Manager service. Private certificates generated through Secrets Manger are rotated by replacing existing certificate value with new certificate version. Public certificates generated in Secrets Manager are moved to Active, Rotation Pending status to indicate that the request to renew the certificate is being processed. Secrets Manager does DNS validation to verify that you own the domain listed in the certificate, if succeeded, Secrets Manager gets a new certificate and status changes back to Active. if validation failed, the status of the certificate changes to Active, Rotation failed. Cloud applications and services running on the platform might use certificate for different purposes - TLS or mTLS, client/server authentication and more. Ensuring...

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Using Console: 1. You can view the certificate renewal settings such as expiration date, rotation interval or state 2. Log in to the IBM Cloud® console. 3. Go to Menu, Resource List to view a list of your resources. 4. Click on Security and click on the Secrets Manager instance that you want to use 5. In the Secrets table, click the Actions menu to open a list of options for your secret 6. To view the secret value, click Details To download a certificate by using Secrets Manager UI, complete the following steps 1. In the Secrets table, open the overflow menu for the certificate that you want to download 2. Click Download, the certificate file is downloaded to your local system

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Using Console: 1. Log in to the IBM Cloud® console. 2. Go to Menu, Resource List to view a list of your resources. 3. Click on Security and click on the Secrets Manager instance that you want to use 4. If you're ordering a public certificate, enable the rotation options. a. To rotate the certificate automatically, switch the rotation toggle to On. Your certificate is automatically reordered 31 days before its expiration date. b. To request a new private key for the certificate on each rotation, switch the rekey toggle to On. 5. If you're editing an existing public certificate, schedule automatic rotation by updating its details. a. In the Secrets table, view a list of your existing Public certificates. b. In the row for the certificate that you want to edit, click the Actions menu, Edit details c. Use the Automatic rotation option to add or remove a rotation policy for the secret 6. If you're creating private certificates, enable the rotation options. a. To rotate the certificate automatically, switch the rotation toggle to ON b. Select an interval and unit that specifies the number of days between scheduled rotations. Note: Note: Depending on the certificate template that is as...

Svojstva

Operativni sistemi
Bilo koji
Oznake
cloudibmcloud
Referenca
CIS IBM Cloud Foundations Benchmark v2.0.0 - 8.2.1 Ensure certificates imported into or generated through IBM Cloud® Secrets Manager are automatically renewed before expiration