User Guide

How to manage credentials

This guide shows you how to add, update, and rotate credentials in an Audit Service credentials pool. AlloyScan uses these credentials to authenticate to target devices during scan and audit.

For AlloyScan cloud worker, add and manage credentials under Admin Center > Settings > Cloud credentials instead. These are site-owned credentials stored encrypted in AlloyScan, separate from the local Audit Service pool. See How to add credentials.

Prerequisites

  • Site Administrator role.
  • An installed Audit Service registered to the site.
  • The secret values for the credential you want to add (passwords, keys, or cloud secrets).

Steps

  1. Navigate to Admin Center > Tasks and services > Audit services.
  2. Click the Audit Service whose pool you want to edit.
  3. In the service detail modal, switch to the Credentials tab.
  4. Under Add credentials, click the button matching the credential type you need: Windows, Linux and macOS, Hypervisor, SNMP, AWS, Azure, Google Cloud Platform, Google Directory, JAMF, or Microsoft Intune.

  5. Enter a descriptive Title and the authentication details required for the selected type, including any secret-confirmation fields. See Credential Types Reference for the field list.

    For Google Cloud Platform and Google Directory credentials, you can use Upload service account JSON to fill in the service-account fields.

  6. Save the credential.

Rotate a credential

To rotate an existing credential after a password change at the target, open the credential record, enter the replacement value, complete any matching confirmation field, and save.

Verify

After saving, the credential appears in the Credentials grid on the Audit Service modal with its Title, Type, and a lock icon in the Has password column. Trigger an ad-hoc audit on a single target device to confirm authentication succeeds. Failed authentication produces an entry in Admin Center > Logs > Security log with Service authentication failed, and the device's Last audit status column shows the failure.