Machine Details Page
The Machine Details page provides comprehensive information and management controls for individual machine identities. Access this page by clicking on any machine from the Machines Overview page.
Machine Information
The Machine Details page displays:
- Machine Name: The unique identifier for this machine
- Machine Group: The group this machine belongs to
- Status: Current operational status (Running, Halted, Terminated)
- Created: When the machine identity was created
- Last Activity: Timestamp of most recent API access or authentication
- DLN Credentials: Status of the machine's DLN client certificates
Machine Status States
Machines can be in one of several states:
- Running: Machine is actively accessing protected resources (generating credentials in Authenticator-based mode, or allowed to make connections in agentless/firewall mode)
- Halted: Machine access is temporarily suspended (credential generation suspended for Authenticator-based deployments; all traffic blocked for agentless and firewall mode deployments)
- Terminated: Machine access has been permanently revoked
- Rotating: Machine is in the process of rotating DLN credentials (Authenticator-based deployments only)
Management Actions
Halt Machine
Halting a machine prevents it from accessing protected resources, but the specific behavior depends on your deployment type:
Authenticator-based proxy mode: Halting temporarily suspends the machine's ability to generate Corsha credentials. The Authenticator remains deployed but cannot create new credentials until the machine is resumed.
Agentless proxy mode and firewall mode: Halting blocks all traffic originating from the machine identity. Any connection attempts or API requests from this machine will be denied by Gatekeepers.
In all cases, the machine identity remains in the system and can be resumed to restore access.
Use cases for halting:
- Temporary maintenance windows
- Suspicious activity investigation
- Scheduled downtime periods
- Responding to security incidents
Resume Machine
Resuming a halted machine restores its ability to generate credentials and access protected APIs.
Rotate Credentials
Credential rotation generates new DLN client certificates for the machine. This requires the machine's Authenticator to re-authenticate with the DLN on its next connection.
When to rotate credentials:
- Regular security hygiene (periodic rotation)
- After suspected compromise
- When machine certificates are approaching expiration
During rotation, the machine enters a "Rotating" state. Once new credentials are generated and the Authenticator reconnects, the machine returns to "Running" status.
Terminate Machine
Terminating a machine permanently revokes its access to protected APIs. This action cannot be reversed. To restore access, you must create a new machine identity and redeploy the Authenticator with new credentials.
Use cases for termination:
- Machine decommissioning
- Confirmed security compromise
- Removing unused machine identities
Authenticator Routes
The Machine Details page also displays configured Authenticator routes—the API endpoints this machine is authorized to access through its Authenticator.
Routes can be added or removed to control which APIs the machine can call. See the Authenticator documentation for details on route configuration.