---
title: Charmhub | Deploy Hardware Observer using Charmhub - The Open Operator Collection
description: Deploy the latest version of Hardware Observer on any cloud.
url: https://charmhub.io/hardware-observer/docs/cryptography
---

# Hardware Observer

[Canonical BootStack Charmers](https://charmhub.io/publisher/bootstack-charmers "View all packages from Canonical BootStack Charmers")

* [Canonical BootStack Charmers](https://charmhub.io/publisher/bootstack-charmers "View all packages from Canonical BootStack Charmers")

Platform:

26.04

24.04

22.04

20.04

18.04

stable 894

```
juju deploy hardware-observer
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

---

#### Relevant links

* [Homepage](https://github.com/canonical/hardware-observer-operator)

---

#### Contacts

* [Submit a bug](https://github.com/canonical/hardware-observer-operator/issues)

---

Share your thoughts on this charm with the community on discourse.

[Join the discussion](https://discourse.charmhub.io/)

## [Cryptography](https://charmhub.io/hardware-observer/docs/cryptography#p-33529-cryptography)

### [Resource checksums](https://charmhub.io/hardware-observer/docs/cryptography#p-33529-resource-checksums)

This charm can make use of for some additional vendor-specific binary tooling to enhance its functionality. Since those tools are available after agreeing to an EULA, they are not redistributed directly by the charm and must be sideloaded via [juju resources](https://charmhub.io/hardware-observer/resources/).

In order to protect users from mistakenly deploying malicious variants of the expected tools, all resources are validated against a hardcoded list of known-good SHA256 checksums.

The checksums are maintained in file `checksum.py`

### [Sources verification](https://charmhub.io/hardware-observer/docs/cryptography#p-33529-sources-verification)

Whenever HPE hardware is detected, this charm deploys the `ssacli` binary. SSACLI is retrieved from the mcp repository, which is owned by HPE and is located at <http://downloads.linux.hpe.com/SDR/repo/mcp>.

Validation of this additional source follows the standard protocol used for all apt sources, using keys stored in file `keys.py`. These GPG keys were imported from <https://downloads.linux.hpe.com/SDR/keys.html> and are now held as static files in the hardware-exporter repository.

### [Use of TLS](https://charmhub.io/hardware-observer/docs/cryptography#p-33529-use-of-tls)

This charm leverages TLS in one area:

* the presence of Redfish support (used to determine whether to enable the relative collector) is detected by querying the Redfish API of the local BMC over https.

Both connections are performed via the `requests` library.

### [Passwords](https://charmhub.io/hardware-observer/docs/cryptography#p-33529-passwords)

This charm handles credentials for the Redfish collector included in hardware-exporter. The credentials are specified in the charm config and are rendered in an on-disk, plain-text configuration file only readable by the root user.

---