Managing Machine Identities
The Console provides comprehensive tools for managing machine identities—the cryptographic identities representing machines that access protected APIs or participate in firewall-managed connections.
What are Machine Identities?
A machine identity represents a machine (physical or virtual) that:
- Generates MFA credentials to access protected APIs (proxy mode)
- Participates in connection rules enforced by Gatekeepers (firewall mode)
- Has an associated Corsha Authenticator for credential generation
Machine identities can be managed individually or organized into machine groups for simplified policy management.
Machine Identity Management
The Machine Identity management features allow you to:
- View and search machines: Access the Machines Overview to see all machine identities
- Create new machines: Use the machine creation wizard to add new machine identities
- Manage machine lifecycle: Halt, resume, rotate credentials, or terminate machines
- Organize into groups: Create machine groups for policy management
- Configure access routes: Define which APIs each machine can access
Getting Started
Choose the topic that matches your needs:
Machine Identities Overview
View all machines, create new machine identities, and search the machine inventory.
Machine Details Page
View detailed information about individual machines and perform management actions like halting, resuming, rotating credentials, or terminating access.
Machine Groups
Organize machines into logical groups for simplified policy management and better organization.
Machine Group Details
View and manage machine group membership, properties, and connection rules.
Related Topics
- Discovering Machines: Automatic machine discovery from network traffic
- Managing Policies: Create connection rules and protocol enforcement policies
- Connection Canvas: Visualize machine connections and groups
- Authenticator: Deploy Authenticators for machine identities