Skip to main content

​
Overview

nxtRadar security encompasses agent authentication via per-node tokens, dashboard access control through NxtSight identity roles, and TLS certificate lifecycle management for all platform communications.
Administrator Access Required — This operation requires the admin role. Contact your NxtSight administrator if you do not have sufficient permissions.

​
Agent Authentication

Each nxtRadar agent authenticates to the collector using a unique per-node token. Rotate tokens periodically and immediately when a node is decommissioned or suspected compromised.
Generate a new agent token
List all agent tokens with expiry
Revoke an agent token
Revoking a token immediately disconnects the associated agent. Ensure the replacement token is deployed to the agent configuration before revoking the old one, or the node will stop reporting metrics.

​
Dashboard Access Control

nxtRadar dashboard access is controlled through NxtSight identity roles. Assign roles based on job function to enforce least-privilege access. Assign roles through nxtDeploy → Identity → Role Assignments.
Use the monitoring-viewer role for application teams who need to observe their service metrics without the ability to modify alert rules that affect other teams.

​
TLS Configuration

All nxtRadar communication uses TLS:
  • Agent-to-collector: TLS 1.3 minimum
  • Dashboard and API: TLS 1.3 minimum, HSTS enabled
  • Internal service communication: mTLS for collector-to-store traffic
Certificates are managed by nxtDeploy and renewed automatically 30 days before expiry.
Check all certificate expiry dates
Expected output shows certificate subjects, expiry dates, and days remaining. Certificates within 30 days of expiry trigger an automatic renewal.

​
Next Steps

Agent Configuration

Deploy and configure agents whose tokens are managed here

Alert Channels

Secure notification channel credentials and SMTP authentication

Troubleshooting

Diagnose TLS and authentication errors

NxtSight Identity

Manage the NxtSight identity roles used for nxtRadar access control