Identity & Access
Manage machine credentials through their lifecycle, and control who can operate the guardian.
- Credentials and RenewalA credential admits a machine to its realm, and every credential expires. Learn where credentials come from, how conflux renews them and what to do when renewal fails.
- RealmsRealms decide which machines can exchange data. Learn how the guardian runs your tree of realms, and how to mint, rename and archive sub-realms in the console.
- Commissioning MachinesCommission a machine in the console, then give its operator one file, the manifest, to admit it to your sovereign network.
- RenewalMachines renew their own credentials through the guardian, so you never renew one by hand. The renewal record shows every renewal and every refusal.
- Revocation and BlocksRevoke a machine to remove it for good. Block it to shut it out of its realm at once. The console can do both in one step.
- Realm ControlMove running machines between compartments, set the networks a subnet router serves, and review blocks and control activity. When console control is off, use conflux with a control credential instead.
- Sign-In, Roles and AccountsControl who can sign in to the guardian console, and use four roles to decide what each person can do.
- Compliance ProfilesChoose how operators sign in to the guardian and which jurisdiction's values the guardian enforces. Make both choices before the first run.