Onboarding and Trust

Find your servers and privileged accounts, bring them in, and keep track of the hosts you trust.

A checklist that knows where you are

A new installation opens with Getting started: seven steps, from connecting your directory to the first verified account, each checked off from what Anchor finds in the installation.

The Accounts page with Getting started expanded: six of seven steps done, with connecting a directory as the next step — Getting started on the AcmeCorp installation: six of seven steps done, worked out from the installation itself. Connecting a directory is next.

Find what you already have

An Estate scan looks at the hosts, address ranges or directory computers you name. It checks what each one answers on (SSH, WinRM over HTTPS, PostgreSQL or LDAPS) and sorts the results into matched, new, drifted or missing. Given a credential, it can also sign in and list local users, domain users and database roles, with the privileged ones flagged. Nothing is placed in Anchor until you have reviewed it.

An Estate quick scan of three AcmeCorp Linux hosts, each reached over SSH and matched to its Target by host key — A quick scan of AcmeCorp's three Linux hosts: each answered on SSH and matched the Target Anchor already knew, by its host key.

Bring accounts in, three ways

Add account takes three steps: where it lives, which account, review. Anchor never creates the user on the server, and it checks a password you supply straight away.
Bulk onboarding takes a CSV file of up to 5,000 accounts and checks every row before anything is imported.
From the directory, Active Directory computer objects become Targets in one reviewed import.

The Add account panel on its first step, listing AcmeCorp's Scopes to choose from — Add account starts with where the account belongs: choose its Scope, then its Target and the account itself.

Trusted hosts

Anchor keeps track of the SSH hosts you trust. Each host’s key is approved once and listed under System → Host keys.

System, Host keys listing the approved SSH identities of the three AcmeCorp Linux hosts with their fingerprints — System → Host keys: every trusted SSH host, with its fingerprint and when it was last seen.

Next stop · 02Accounts and PasswordsEvery privileged account in one list, its password checked and changed on schedule.