Contents

System Accounts

Access the System

Manage Non-Admin Type Users

SSH User Authentication Using Windows Active Directory

K8S API User Authentication Using Windows Active Directory

Obtain the Authentication Token

Deprovision Windows Active Directory

Firewall Options

HTTPS Certificate Management

Cert Manager

Portieris Admission Controller

Vault Secret and Data Management

Encrypt Kubernetes Secret Data at Rest

Linux Auditing System

Operator Login/Authentication Logging

Operator Command Logging

UEFI Secure Boot

Authentication of Software Delivery

CVE Maintenance

Security Feature Configuration for Spectre and Meltdown

Deprecated Functionality

Appendix: Locally creating certificates