This dashboard summarizes PKI platform connections and discovered certificate authorities. It helps PKI teams understand CA inventory, readiness, migration priority, enrollment endpoints, and certificate volume.
Panels
| Panel | Purpose |
|---|---|
| Platform Coverage | Confirms connected PKI platforms and the connector or protocol producing each record. |
| CA Inventory | Compares CA count, status, certificate volume, and migration priority. |
| CA Readiness | Identifies authorities whose certificates are not quantum-ready or require PQC migration. |
| Enrollment and Templates | Shows enrollment paths and template context when optional values are emitted. |
Key Data Fields
event.action=pki_ca_discovered, event.created, tychon.pki.platform.type, tychon.pki.ca.*, x509.public_key_algorithm, x509.public_key_size, x509.not_after, x509.serial_number.
Reading the Dashboard
Platform Coverage
Shows connected PKI platforms by type, vendor, host, and scan status. Use it to distinguish platform coverage from CA-object counts.
CA Inventory
Counts and identifies discovered certificate authorities using the emitted CA name, type, ID, and platform context.
CA Readiness
Summarizes emitted status, PQC readiness, vulnerability, migration priority, and HSM-backed indicators when the scanner provides them. Blank values mean the source did not report that attribute.
Enrollment and Templates
Uses enrollment URL and template fields, when present, to identify issuance paths and certificate-template dependencies for follow-up.
Filtering and Performance
Use the dashboard time range and global filters to narrow the population before interpreting counts. Preserve host, application, platform, algorithm, and risk filters when moving to related dashboards. Aggregations summarize the filtered events; missing optional fields mean that a value was not emitted or observed, not that the condition is false.
Related Dashboards
Use the overview page to move between this dashboard and the other dashboard definitions.