The Mandossystem allowscomputers tohave encryptedroot filesystems and atthe same timebe capable ofremote orunattendedreboots. Thecomputers run asmall clientprogram in theinitial RAMdiskenvironmentwhich willcommunicatewith a serverover a network.All networkcommunicationis encryptedusing TLS. Theclients areidentified bythe serverusing anOpenPGP keythat is uniqueto each client.The serversends theclients anencryptedpassword. Theencryptedpassword isdecrypted by
x509viewer is asimple commandlineapplication,written inPerl, that canbe used todecode one ormultiple X.509certificatesper given file,such as e.g.SSLcertificates,CSRs(certificatesigningrequests), butalso privatekeys.
x509watch is asimple commandlineapplicationthat can beused to listsoon expiringor alreadyexpired X.509certificates,such as SSLcertificates.Allcertificatesare searched bydefault in thestandard PKIdirectory, butany otherdirectory canbe specified asa parameter.Only Base64encoded DER andPEM X.509certificatesare supported.
spread providesSSH based Unixmassadministration.It distributescommands orfiles from onecentraladministrationserver ontoclasses ofhosts. If onehost iscurrently notreachable, thecommand or filewill getspooled. Assoon as thehost is upagain, spreaddelivers itautomatically.