SecurityInsight settings · Settings > Sign-in & Azure resources
Sign-in certificate thumbprint
| Key | SI_SPN_CertThumbprint |
|---|---|
| Where | Settings > Sign-in & Azure resources > How SecurityInsight signs in |
| Type | Text |
| Default | Taken from the platform's certificate setting if present; else no certificate sign-in |
| Edition | Community |
What it does
Thumbprint of the service principal's certificate, with its private key in the certificate store, used for certificate sign-in.
When set
Lets the engines, ingestion and SQL connections sign in with this certificate. A wrong or missing certificate makes certificate sign-in fail; with both certificate and secret set, the certificate is preferred.
When blank or default
Left blank, the default applies: Taken from the platform's certificate setting if present; else no certificate sign-in
Risk and how to reverse it
Affects how the jobs sign in or which Azure resources they use. A wrong value stops the affected jobs at their next run (nothing is changed or deleted); a broader identity or right gives the jobs more access than they need. Reversible: correct it and run again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Set at install and when the certificate is renewed.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack