Add host credentials to authenticate with discovered hosts and gain insights into resources, and resource instances, without requiring an agent. Host credentials are encrypted and stored securely in the vault.
There are two authentication methods available; using Secure Shell (SSH) authenticate with Linux or macOS hosts on port 22, and using Windows Remote Management (WinRM) authenticate with Windows hosts on ports 5986 and 5985.
CAUTION: Using each SSH and WinRM credential you provide, Puppet Discovery attempts to authenticate with each discovered host until successful authentication. This process repeats every 30 minutes, using previous successful credentials first. Depending on the configuration of your network management and security sensors, Puppet Discovery's activities may trigger alerts or an active response.
Restriction: Puppet Discovery does not accept the OpenSSH private key format.
Tip: Each time a credential is added, the discovery run starts automatically.
- Secure Shell (SSH)
Puppet Discovery provides two types of authentication methods for use with SSH; username and password using negotiated encryption, and private key files using asymmetric encryption. - Windows Remote Management (WinRM)
To authenticate with discovered Windows hosts, Puppet Discovery uses NTLM authentication over HTTPS on port5986. When enabled, Puppet Discovery fallbacks to using NTLM authentication over HTTP on port5985, if the default authentication fails. - Manage credentials