Skip to content

Security Architecture

Short Summary: How SSL-CLM protects your private keys and infrastructure using Zero Trust principles, strong encryption, and strict access controls.

All sensitive fields in the MongoDB database are encrypted using AES-256 GCM.

  • Fields: privateKey, password, apiKey, token.
  • Key Management: The Master Key is configured via ENCRYPTION_KEY env var or fetched from a Vault.
  • Agent ↔ Backend: TLS 1.3 enforced.
  • UI ↔ Backend: TLS 1.3 enforced.
  • Mutual TLS (mTLS): Configuration option to require Agents to present a client certificate.

We implement a permission-based model.

RolePermissions
ViewerRead-only access to inventory. No sensitive data access.
OperatorCan request/renew certificates. Can trigger scans.
AdminFull system access. Can manage users and global settings.

The Agent connects outbound to the Backend. This eliminates the need to open dangerous inbound ports (like SSH/WinRM) on your critical servers to a central management server.

  • Software Bill of Materials (SBOM): Provided with every release.
  • Code Signing: All artifacts are signed by QCecuring.