Infrastructure
Workstation monitoring with signed self-update
A small agent on each machine reporting health, updating itself only from a signature it can verify.
- Client
- Diagnostic imaging practice
- Period
- 2026
- Stack
- PowerShell, Node.js, RSA signing, Windows 11
The problem
Machine problems surfaced when a user complained. Pushing an update to a fleet meant walking to every desk.
What I built
An agent reporting to a central board, with self-update gated on an RSA signature whose private key never lives on the server. A compromised board cannot push code to the fleet.
Result
The fleet updates itself, and the update path has a key the server does not hold.
PowerShellNode.jsRSA signingWindows 11
All projects