CBOM Documentation

CBOM Secure

  • Product Overview
    • Overview
    • Dashboard Interface
    • Dashboard Operations
    • Data Visualization
    • Overview
    • Host
    • Template
      • Networked Deployments
      • Cloud Deployments
      • Off-Grid Deployments
    • Discovery History
      • Tags
      • Tag Scope
      • Integrations
      • Cloud Servers
      • CycloneDX Export
    • Sensors Reference
    • Overview
    • Summary Report
    • PQC Report
    • AI Services
    • Source Code Visualizer
    • Key
    • Certificate
    • CipherSuites
    • Analysis
    • Policy Management
    • User Policy
    • Standard Policy
    • Overview
    • Cases
    • Criteria
    • Notification Format
    • Rules
      • Connections
      • Health
    • User Management
    • Roles & Permissions
    • Audit Trail
    • System Logs
    • Top Bar and User Menu
    • System Configuration
  • Login and Authentication
    • Introduction
      • Components
      • Data Flows
      • Execution Models
      • Incremental Scanning
      • Security Model
      • Topologies
      • Sizing Guide
      • HA and Scaling
      • Ports and Firewall
      • Prerequisites
      • Docker Compose
      • Native on Linux
      • Deployment Server
      • Install Troubleshooting
      • Validation Checklist
      • Managing Services
      • Logging
      • Certificates
      • Configuration
      • Backup and Recovery
      • Ops Troubleshooting
      • Methods
      • SAML 2.0 SSO
      • OIDC and Entra ID
      • Token Authentication
      • Password Policy
      • Sensor vs Connector
      • Sensor Guide Structure
      • Capability Matrix
      • GitHub Sensor
        • AWS
        • Azure
        • Google Cloud
        • Active Directory
        • LDAP Directories
        • AD CS
        • Thales Luna HSM
        • Entrust nShield HSM
        • HashiCorp Vault KMIP
        • Windows Cert Store
        • Linux Trust Store
        • MSSQL TDE
      • Roadmap
      • Integration Model
      • CrowdStrike
      • ServiceNow
      • ServiceNow and Jira Setup
      • Notification Engine
  • Administrative Guide
    • Glossary
    • Configuration Reference
    • Data Model Reference
    • API Reference
    • API Authentication
    • CycloneDX Export Specification
    • Risk and PQC Scoring
    • Built-in Standards
    • Widget Catalogue
    • AI Services Data Handling

Cloud Servers

A Cloud Server is the machine a cloud discovery task runs from. Where a networked task reaches out to each target in turn, a cloud task runs on one of these servers and talks to the cloud provider's APIs from there. Registering a server here is what makes it selectable on a Cloud Deployment.

The page is reached from Discovery > Settings > Cloud Servers in the left navigation menu, and needs the cloud-server:read permission.

Viewing Cloud Servers

Add Cloud Server sits on the toolbar; each registered server is one row.

CBOM Secure Discovery — Cloud Servers
  • Name: Your own name for the server.

  • Host ID: The identifier the platform uses for it internally.

  • IP / Hostname: How the server is reached.

  • OS: Its operating system.

  • Username: The account used to connect, or N/A where none is recorded.

  • State: Active for a server ready to use, or Draft for one saved part-finished. A draft cannot be used by a task until it is completed.

The footer carries the same controls as every other table in the portal: the record range on the left, the page links in the centre, and a Rows per page selector on the right.

Adding a Cloud Server

Click Add Cloud Server and enter the server's details. Every field is required:

CBOM Secure Discovery — Add Cloud Server
  • Host ID: A short identifier for the server, for example cloud-prod-east.

  • Name: A readable name shown in the lists.

  • IP / Hostname: The address to connect to.

  • Operating System: The server's platform.

  • Username / Password: The credentials used to reach it. The password is stored encrypted; the eye icon shows or hides it as you type.

  • State: Active to make the server available to tasks straight away.

Click Add to register the server, or Save as Draft to keep an incomplete record you intend to come back to — useful when you are waiting on credentials. Cancel discards it.

Cloud Server Actions

Right-click any row for its actions. Two of the three change with the server's state:

CBOM Secure Discovery — cloud server actions
  • Create Discovery Task: Starts a cloud task with this server already chosen. Disabled for a draft, which cannot run anything yet.

  • Edit Cloud Server / Edit Draft: Reopens the dialog on the saved values. Host ID is fixed once the server exists, and Password is labelled leave blank to keep current, so an empty field keeps the stored credential rather than clearing it.

  • Delete / Discard Draft: Removes the record. It is disabled for the platform's default server.

CBOM Secure Discovery — Edit Cloud Server

The delete confirmation states the constraint: Remove this cloud server? It must not be referenced by any task deployment. Delete the cloud tasks that use it first. For a draft the prompt is Confirm Discard instead, since nothing can be referencing it.

CBOM Secure Discovery — delete cloud server confirmation

Creating a Task from a Server

Create Discovery Task opens the same Create Cloud Task dialog as the Cloud Deployments page, with the Cloud Server field already filled in and showing the server's host ID, address and platform.

CBOM Secure Discovery — Create Cloud Task from a server

Give the task a name, choose one or more Cloud-delivery templates and any tags, then click Create. The new task appears under Discovery > Tasks > Cloud Deployments, ready to deploy.

On this Page:
Support Privacy Policy Terms of Service

Copyright 2026 Encryption Consulting LLC. All rights reserved.