Tenable Security Center (TSC) is an on-prem.-based vulnerability scanning and assessment service that continuously discovers, assesses, and reports on vulnerabilities across an organization IT infrastructure. This plugin discovers SSL/TLS certificates from Tenable Security Center by querying vulnerability scan results. It scans all hosts within the Tenable SC instance and extracts certificate details, including subject, validity dates, cipher suites, and associated services (such as HTTPS and SMTP).
The Tenable Security Center plugin integrates information retrieved by the following plugins.
Plugin ID | Description |
|---|---|
10863 | Retrieves SSL certificate information (primary source of certificate data) |
10107 | Identifies HTTP server type and version |
10263 | Identifies SMTP mail server information |
21643 | Enumerates the supported SSL Cipher Suites |
Tenable Security Center plugin features are:
- Authenticates to Tenable using API access and secret keys
- Retrieves vulnerability data specifically related to SSL certificates (Plugin ID 10863),
- Enriches the certificate information with service detection data (web server types/versions, SMTP servers) and cipher suite information captured by Tenable scanners.
- Discovers SSL/TLS certificates from all scanned hosts in Tenable Security Center
- Enriches certificate records with host operating system, HTTP server version, and SMTP service information
- Collects cipher suite information per host
- Deduplicates certificates by SHA-256 fingerprint across all hosts
- Tracks scan timestamps in state for audit purposes