Patent ID: 11962584
Assignee: TWISTLOCK LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 17:
18. A system comprising:
a processing circuitry; and
a memory, the memory containing instructions that, when executed by the processing circuitry, cause the system to:
create a primary certificate based on signed data obtained from a cloud provider, wherein the signed data identify a plurality of nodes in a network environment of the cloud provider;
create a plurality of intermediate certificates based on the primary certificate, wherein the primary certificate and each of the plurality of intermediate certificates comprises a signature of the cloud provider, wherein each of the plurality of intermediate certificates is unique;
send each of the plurality of intermediate certificates to a respective one of a plurality of entities, wherein each entity of the plurality of entities is installed on a respective node of the plurality of nodes; and
deploy each of a plurality of agents to a respective one of the plurality of nodes, wherein the plurality of agents enforces at least a first firewall policy for respective ones of the plurality of entities based on the plurality of intermediate certificates.