Recommended System Configuration¶
At minimum, the NHI Security Platform runs on a single Windows server, with the bundled PostgreSQL database on the same machine. For production, the recommended setup adds a separate database server, plus optional servers for high availability and reporting.
It is installed using the Securden Unified PAM installation package and activated with a licence for either the complete NHI Security Platform or Certificate Management alone. Both licence options use the same server configuration.
NHI discovery is agentless. The platform connects to your cloud accounts and code repositories through each provider's API, so you do not install anything on the systems it scans.
SaaS deployments: Securden hosts and manages the servers. To discover IIS servers and Linux devices inside your network, a remote connector must be installed in that network. The remote connector is not required for on-premises deployments.
Solution Components¶
| Component | Role | Required |
|---|---|---|
| Primary application server | Hosts the web console and core services: data source discovery, risk assessment, certificate management, reports and audit trails. | Yes |
| Secondary application server | Takes over if the primary server fails (high availability). | Optional |
| Primary database | Stores the identity and secret inventory, discovered secret values (encrypted), certificates and audit trails. Bundled PostgreSQL by default; Microsoft SQL Server optional. | Yes |
| Secondary database | Continuously copies data from the primary database. | Optional |
| Read-only replica server | A copy of the data used for reporting, so reports do not slow down the primary server. | Optional |
| Remote connector | Connects Securden’s cloud to IIS servers and Linux devices inside the customer’s network. | SaaS only |
With two application servers connected to one database, the platform stays available if one server fails: the load balancer sends users to the other server. The two servers can be separate physical machines or two virtual machines on one host.
Server Requirements (Production)¶
Any physical or virtual server that meets the configuration below works.
| Unit | Primary server | Secondary server | Database server |
|---|---|---|---|
| Memory | 16 GB RAM | 16 GB RAM | 16 GB RAM |
| Disk | 50 GB or more | 50 GB or more | 50 GB or more |
| Virtual CPU (Intel or AMD) | 4 or more cores | 4 or more cores | 4 or more cores |
| Operating system | Windows Server 2016 or above | Windows Server 2016 or above | Windows Server 2016 or above |
| IP address | 1 static IP | 1 static IP | 1 static IP |
| Quantity | 1 | 1 or more | 1 |
| Purpose | Core NHI Security Platform server | High availability | Backend database (bundled PostgreSQL, or Microsoft SQL Server) |
Each server needs a Windows Server licence.
The database grows with the number of secrets and certificates discovered.
Client Access¶
Users open the web console in Chrome, Edge, Firefox or Safari.