Add certificate posture check (#1038)

Browse Source

* add certificate posture checks

* update screenshots

* fix typo

* Correct the certificate posture check docs against the shipped client

* Fix the macOS import command, the Debian environment file, an anchor and a hardware claim in the certificate docs

* Trim the certificate posture docs to what a user needs

* docs: fix certificate posture accuracy and grammar nits

- The 1-hour prompt back-off applies on macOS only (collect_darwin.go)
- Key files are refused as symlinks too, not only certificate files
- Geo and network range checks use the server-observed IP, so "most"
  checks read device-reported data, not "every other"
- State the refresh as 4 hours consistently
- Grammar: "are covered", "Red Hat-based", "in the clear", passphrase phrasing

* docs: tighten certificate posture wording and align overview refresh time

* docs: recommend root-only read access for plain certificate key files

---------

Co-authored-by: Viktor Liu <viktor@netbird.io>
Co-authored-by: Jack Carter <128555021+SunsetDrifter@users.noreply.github.com>

...

This commit is contained in:

Pascal Fischer

2026-10-15 09:28:58 +02:00

committed by GitHub

co-authored by Viktor Liu Jack Carter

parent cb4c29844f

commit cab16a160c

5 changed files with 183 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

public/docs-static/img/manage/access-control/posture-checks/posture-checks-02.png

BIN

Binary file not shown.

Side by Side Swipe Overlay Before Width:  |  Height:  |  Size: 246 KiB After Width:  |  Height:  |  Size: 1.1 MiB

public/docs-static/img/manage/access-control/posture-checks/posture-checks-certificate.png

BIN

Binary file not shown.

Side by Side After Width:  |  Height:  |  Size: 1.3 MiB