# ITVA > Safe, Reliable AI for Critical IT Infrastructure This is the ITVA product documentation. Each link below is a Markdown copy of a doc page; the same page without the .md extension is the HTML version. Every doc in one file: https://www.itva.com/llms-full.txt ## Getting Started - [Add your first probe](https://www.itva.com/docs/getting-started/adding-your-first-probe.md): Create a probe in the ITVA portal and install it on Linux, Windows, or Docker so ITVA can connect to your devices. - [Add your first device](https://www.itva.com/docs/getting-started/add-your-first-device.md): Add a network device to the ITVA inventory, give it credentials and a probe, and test the connection. - [Sync data from your devices](https://www.itva.com/docs/getting-started/sync-data-from-your-devices.md): Learn how ITVA collects data from your devices, and sync a device manually from its device page. - [Create your first schedule](https://www.itva.com/docs/getting-started/create-your-first-schedule.md): Create a schedule that syncs data from your devices automatically, at the days and interval you choose. ## Devices - [Supported vendors](https://www.itva.com/docs/devices/supported-vendors.md): The vendors ITVA supports, and the protocol and port ITVA uses to connect to each one. ## Devices / Vendors / Cisco IOS-XE - [Create a read-only account on Cisco IOS-XE](https://www.itva.com/docs/cisco-ios-xe/create-a-read-only-account-on-cisco-ios-xe.md): Create a privilege level and account that let ITVA collect data from a Cisco IOS-XE device without permission to change it. ## Devices / Vendors / Juniper - [Create a read-only account on Juniper Junos](https://www.itva.com/docs/juniper/create-a-read-only-account-on-juniper-junos.md): Create a Junos login class and account that let ITVA collect data from a Juniper device without permission to change it. ## Devices / Vendors / Windows - [Enable WinRM on Windows Server](https://www.itva.com/docs/windows/enable-winrm-on-windows-server.md): Turn on WinRM with an HTTPS listener on Windows Server so that ITVA can collect data with Remote PowerShell. ## IPAM - [IPAM overview](https://www.itva.com/docs/ipam/ipam-overview.md): Learn what ITVA tracks in IPAM, which data you add by hand, and which data ITVA collects live from your network. - [Manage subnets](https://www.itva.com/docs/ipam/manage-subnets.md): Add subnets to IPAM by hand or from a CSV file, and find the networks on your devices that are not in your inventory yet. - [Add IP addresses manually](https://www.itva.com/docs/ipam/add-ip-addresses-manually.md): Add IP addresses to a subnet by hand or from a CSV file, and download your IP allocations as a CSV file. - [Sync ARP and MAC entries](https://www.itva.com/docs/ipam/sync-arp-and-mac-entries.md): Collect ARP tables and MAC address tables live from your network devices, and find the switch port for an IP or MAC address. - [Sync DNS records](https://www.itva.com/docs/ipam/sync-dns-records.md): Collect DNS zones and records live from Windows Server and Infoblox, and add DNS hostnames to your IP allocations. - [Sync DHCP leases](https://www.itva.com/docs/ipam/sync-dhcp-leases.md): Link a subnet to its Windows Server DHCP server, and add the active leases to IPAM as IP allocations. ## Asset Management - [Add a location](https://www.itva.com/docs/asset-management/add-a-location.md): Add a location to record where your devices are. A location holds its racks and floor plans, and you can link it to circuits. - [Build a rack elevation](https://www.itva.com/docs/asset-management/build-a-rack-elevation.md): Add a rack to a location and place devices in its front and back slots, so you can see which device is in each rack unit. - [Map devices and racks on a floor plan](https://www.itva.com/docs/asset-management/map-devices-and-racks-on-a-floor-plan.md): Upload a floor plan image for a location and pin devices and racks to it, so you can see where your equipment is. - [Add a circuit provider](https://www.itva.com/docs/asset-management/add-a-circuit-provider.md): Add the carriers and service providers that supply your circuits, with their phone and email contacts. - [Add a circuit](https://www.itva.com/docs/asset-management/add-a-circuit.md): Record your WAN and carrier circuits with their costs, rates, and contract dates, and link them to locations and device interfaces. ## Monitoring - [Monitoring and alerting overview](https://www.itva.com/docs/monitoring/monitoring-overview.md): Learn which checks ITVA can alert on, how thresholds work, and where the data for each check comes from. - [Create an alerting condition](https://www.itva.com/docs/monitoring/create-an-alerting-condition.md): Choose which checks ITVA runs on your devices, interfaces, and probes, set the limits that open an incident, and assign the condition to devices and probes. - [Create an alerting rule](https://www.itva.com/docs/monitoring/create-an-alerting-rule.md): Learn how alerting rules match incidents by tag and priority, how levels escalate, and how to create a rule that sends incidents to the right channels. ## Monitoring / Alerting Channels - [Set up an alerting channel](https://www.itva.com/docs/alerting-channels/set-up-an-alerting-channel.md): Create an email, Teams, or webhook channel so ITVA can send incident notifications where your team works. - [Send alerts to a Microsoft Teams channel](https://www.itva.com/docs/alerting-channels/send-alerts-to-a-microsoft-teams-channel.md): Create a Teams workflow that receives webhook requests, then connect it to an ITVA Teams channel so incident notifications post to your team. ## Diagrams - [Diagrams overview](https://www.itva.com/docs/diagrams/diagrams-overview.md): ITVA builds network diagrams from the live data that it syncs from your devices. Learn about the five diagram kinds and what each one shows. - [Create a diagram](https://www.itva.com/docs/diagrams/create-a-diagram.md): Create a diagram from the live data of your devices, arrange its layout, and download it as an image. ## PKI & CLM - [PKI and CLM overview](https://www.itva.com/docs/pki-clm/pki-clm-overview.md): Learn the three ways ITVA finds and manages certificates: network scans, enrollment, and sync from a certificate authority. - [Set up certificate templates](https://www.itva.com/docs/pki-clm/set-up-certificate-templates.md): Create a CA template that controls which issuer signs a certificate, which private key algorithms are allowed, and which subject values are prefilled for requesters. - [Request and issue a certificate](https://www.itva.com/docs/pki-clm/request-and-issue-a-certificate.md): Create an enrollment request, get it approved, and issue the first certificate with the private key source that fits your server. - [Renew, reissue, and revoke a certificate](https://www.itva.com/docs/pki-clm/renew-reissue-and-revoke-a-certificate.md): Renew a certificate by hand or on a schedule, reissue it with a new key or new names, and revoke it on an ADCS issuer. - [Scan your network for TLS certificates](https://www.itva.com/docs/pki-clm/scan-your-network-for-tls-certificates.md): Run a TLS scan from a probe to find the certificates your servers present, then repeat it on a schedule with an application scan template. - [Export certificates](https://www.itva.com/docs/pki-clm/export-certificates.md): Download a certificate from ITVA in PEM, PKCS12, PKCS7, or DER format, with or without its private key and certificate chain. ## PKI & CLM / Issuers - [Add a Windows ADCS issuer](https://www.itva.com/docs/issuers/add-a-windows-adcs-issuer.md): Connect ITVA to a Microsoft Active Directory Certificate Services (ADCS) CA, import its certificate templates, and turn them on for enrollment. - [Add a DigiCert issuer](https://www.itva.com/docs/issuers/add-a-digicert-issuer.md): Connect ITVA to DigiCert CertCentral with an API key, import your DigiCert certificates, and create a template for new certificates. ## PKI & CLM / Automation - [How certificate installs work](https://www.itva.com/docs/automation/how-certificate-installs-work.md): An install tells ITVA where to put the certificate from an enrollment. ITVA delivers it over SSH or HTTP each time the enrollment issues, renews, or reissues a certificate. - [Automating SSL/TLS Certificate Renewals in Apache](https://www.itva.com/docs/automation/automating-ssl-tls-certificate-renewals-in-apache.md): Automatically renew and install SSL/TLS certificates on Apache HTTP Server from Windows ADCS or DigiCert, with a new key each time and a graceful reload with no downtime. - [Automating SSL/TLS Certificate Renewals in NGINX](https://www.itva.com/docs/automation/automating-ssl-tls-certificate-renewals-in-nginx.md): Automatically renew and install SSL/TLS certificates on NGINX from Windows ADCS or DigiCert. ITVA makes a new key, tests the config, and reloads with no downtime. - [Automating SSL/TLS Certificate Renewals in Tomcat](https://www.itva.com/docs/automation/automating-ssl-tls-certificate-renewals-in-tomcat.md): Automatically renew and install SSL/TLS certificates on Apache Tomcat from Windows ADCS or DigiCert, using PEM files instead of a Java keystore. ## Connect - [Connect overview](https://www.itva.com/docs/connect/connect-overview.md): Connect gives your team SSH, RDP, and HTTPS access to devices from the browser. Each session runs through a probe on the device's network. - [Connect to a device over SSH](https://www.itva.com/docs/connect/connect-to-a-device-over-ssh.md): Open an SSH terminal to a device from your browser. You sign in with a saved credential, or with a username and password. - [Open a device's web interface over HTTPS](https://www.itva.com/docs/connect/open-a-device-web-interface-over-https.md): Open a device's web management page in your browser through a probe, without a direct network path to the device. - [Connect to a Windows server over RDP](https://www.itva.com/docs/connect/connect-to-a-windows-server-over-rdp.md): Open a remote desktop session to a Windows server from your browser. Your browser signs in to the server directly, so ITVA never stores your password. ## Permissions & RBAC - [Access control overview](https://www.itva.com/docs/permissions-rbac/access-control-overview.md): Learn how administrators, roles, and tags work together to control what each person can see and change in ITVA. - [Roles and permissions](https://www.itva.com/docs/permissions-rbac/roles-and-permissions.md): Create a role, choose what it allows, and give it to members, SCIM groups, and system API keys. - [Use tags](https://www.itva.com/docs/permissions-rbac/use-tags.md): Create tags and tag categories, add tags to your items, and learn what tags control in ITVA. - [Set up single sign-on](https://www.itva.com/docs/permissions-rbac/set-up-single-sign-on.md): Let members sign in to ITVA with your identity provider over OpenID Connect. - [Provision users with SCIM](https://www.itva.com/docs/permissions-rbac/provision-users-with-scim.md): Let your identity provider add, update, and deactivate ITVA members, and give them permissions through SCIM groups. ## Permissions & RBAC / Credentials - [Credentials overview](https://www.itva.com/docs/credentials/credentials-overview.md): Learn which credential types ITVA supports, how to add a credential to your inventory, and how ITVA stores it. - [Assign credentials to a device](https://www.itva.com/docs/credentials/assign-credentials-to-a-device.md): Learn how a device's credential order and Admin setting decide which credential syncs and the AI use, and set up your devices to match. - [Encrypt your credentials](https://www.itva.com/docs/credentials/encrypt-your-credentials.md): Encrypt a device password with a key that only your probe holds. ITVA stores the encrypted password but can never decrypt it. ## Permissions & RBAC / Identity Providers - [Use Microsoft Entra ID as your identity provider](https://www.itva.com/docs/identity-providers/use-microsoft-entra-id.md): Set up single sign-on and SCIM provisioning between Microsoft Entra ID and ITVA. ## API - [API overview](https://www.itva.com/docs/api/api-overview.md): Learn how the ITVA GraphQL API works, where to find your instance's endpoint, and how the schema is organized. - [Authenticate to the API](https://www.itva.com/docs/api/authenticate-to-the-api.md): Create an API key in the ITVA portal and send it as a bearer token with each request to the GraphQL API. - [Restrict API access](https://www.itva.com/docs/api/restrict-api-access.md): Choose between user and system API keys, and give a system API key only the roles and tags that an integration needs.