SecurityInsight settings · Settings > Advanced / diagnostics
Certificate thumbprint (launcher name)
| Key | SpnCertificateThumbprint |
|---|---|
| Where | Settings > Advanced / diagnostics |
| Type | Text |
| Default | Copied from SI_SPN_CertThumbprint; empty means no certificate sign-in |
| Edition | Community |
What it does
Thumbprint of the certificate in the local certificate store that the service principal signs in with; the recommended alternative to a client secret.
When set
When set with an app id, the launchers sign in with the certificate. A thumbprint that is not in the store makes sign-in fail.
When blank or default
Left blank, the default applies: Copied from SI_SPN_CertThumbprint; empty means no certificate sign-in
Risk and how to reverse it
A tuning or diagnostic setting: it mostly changes run time, cost or log detail. Leave it at the default unless support asks. Reversible at once.
Requires
Read by: asset-tagging, asset-trend, azure, endpoint, identity, publicip, risk-analysis.
Recommended
Keep the default. Change it when: When you sign in with a certificate and do not use the SI_SPN_ names.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack