Skip to content

Review the tenant's cryptographic posture

Read the reports over your tenant's key estate (health, expiry, algorithms, quantum debt, composite components and usage limits) and the posture verdict computed for your tenant, and download the two reports that offer a CSV file.

Who can do it

Every built-in tenant role, and a platform administrator working inside the tenant on a customer-operated deployment. All of it needs one permission, to read tenant analytics. Nothing here changes your tenant.

Before you start

  • A platform administrator assumes the tenant first. Without a tenant, the screen says No tenant selected and requests nothing.
  • The reports count each key's own operation counter, which a rotation resets; the Audit Log is where individual operations are recorded.

Steps

  1. Open Analytics & Reports from your tenant's navigation. Key Health Summary opens first.
  2. Select the report to read; each tab is computed when you open it:
    • Key Health Summary: status tallies, keys in their warning period and keys approaching their usage limit.
    • Expiration Report: the report opens over your deployment's key-expiry horizon, and Threshold days starts at that value. To look over another period, set Threshold days, from 1 to 60, and select Generate Report.
    • Algorithm Usage: active keys per algorithm and the post-quantum adoption share.
    • Most Used Keys: set Show top, from 1 to 100, and apply it with the refresh button.
    • Migration Candidates: active keys that carry quantum debt, each with a recommended post-quantum algorithm and a priority.
    • Component Distribution and Keys by Component: the components of your composite keys; the second tab finds the composite keys using an algorithm you type, matched exactly.
    • Usage Limits: live keys with a hard usage limit.
  3. On Most Used Keys or Usage Limits, select Export CSV to download the report.
  4. For the posture verdict, open Dashboard. Cryptographic Posture shows the verdict and its pillars, and Posture Trend plots them over the last 90 days of daily snapshots.

What you see when it worked

Each report states when it was generated and which keys it counts. The posture band names the pillar that drives the verdict, and selecting a pillar opens its breakdown. Posture Trend reads Collecting baseline until two daily snapshots exist.

If it fails

What you see Cause What to do
Could not load Expiration Report. after Generate Report Threshold days is outside 1 to 60, which the server refuses Open another tab and return to Expiration Report, which opens over the horizon again, then set a value from 1 to 60
Could not load followed by the report's name That report could not be computed; the other tabs are unaffected Select Retry
The search failed. on Keys by Component The search could not be run Check the algorithm name and search again
Could not export followed by the report's name The CSV file could not be produced Export again
No tenant selected A platform administrator opened the screen without assuming a tenant Assume the tenant, then open the screen again

Without the console

Surface How
API Each with GET: /api/v3/admin/tenants/{tenantId}/analytics/health-summary (getKeyHealthSummary), /api/v3/admin/tenants/{tenantId}/analytics/expiration-report?thresholdDays=<n> (getKeyExpirationReport), /api/v3/admin/tenants/{tenantId}/analytics/algorithm-usage (getAlgorithmUsageReport), /api/v3/admin/tenants/{tenantId}/analytics/most-used-keys?limit=<n> (getMostUsedKeysReport), /api/v3/admin/tenants/{tenantId}/analytics/migration-candidates (getMigrationCandidatesReport), /api/v3/admin/tenants/{tenantId}/analytics/component-distribution (getComponentAlgorithmDistribution), /api/v3/admin/tenants/{tenantId}/analytics/keys-by-component?algorithm=<name> (getKeysByComponentAlgorithm), /api/v3/admin/tenants/{tenantId}/analytics/usage-limits (getUsageLimitsReport), /api/v3/admin/tenants/{tenantId}/analytics/posture-summary (getTenantPostureSummary) and /api/v3/admin/tenants/{tenantId}/analytics/posture-history?from=<instant>&to=<instant> (getTenantPostureHistory)
API: CSV GET /api/v3/admin/tenants/{tenantId}/analytics/most-used-keys/export (exportMostUsedKeysReport) and /usage-limits/export (exportUsageLimitsReport)