DocsGet started
Documentation

Security

The Security page shows whether the audit trail is intact and whether the install meets its security checks.

Before you start

You need security.read to view. Changes and Verify now need security.manage.

What the page shows

  • Audit integrity: the chain is Intact, Broken, or Unknown. It also shows the point sealed up to, when it was last sealed and verified, and the state of each export sink (Healthy, Unhealthy, Off). It refreshes every 60 seconds.
  • Certificates and backups: a summary panel.
  • Posture: a table of checks with severity, status (pass, warn, fail, not applicable), evidence, and remediation.
  • More pages for security events, sessions, policy, identity providers, and log export.

Steps: verify the audit chain

  1. Open Setup, then Security.
  2. Read Audit integrity.
  3. Click Verify now to check the chain at once.

Rules and limits

  • If the chain is broken, the page shows "Chain broken at event #N." The system does not repair it. Tell your security officer.
  • Sign-in methods such as smart card, directory, and single sign-on are set by the install and the identity provider settings. Break-glass accounts keep password sign-in when local sign-in is off.