Skip to content

Home

Jump to bottom
Tyler Hatfield edited this page Nov 6, 2026 · 3 revisions

Vitrine RMM Documentation

Welcome to the official Vitrine RMM documentation wiki. Vitrine RMM is an enterprise-grade, glassmorphic self-hosted Remote Monitoring and Management (RMM) platform engineered for NinjaRMM feature parity and beyond, powered by MeshCentral 2 as its remote execution and communication engine.

📚 Documentation Index

1. Getting Started

  • Installation & Setup — System requirements, automated bare-metal systemd installation, Docker Compose deployments, and First-Run onboarding.
  • Architecture & Security — Multi-tenant isolation, OpenID Connect / Authentik SSO, RFC 6238 TOTP Step-Up MFA, AES-256-GCM LAPS & BitLocker vault, Scoped Vendor Guest Portal, and cyber isolation firewalling.
  • MeshCentral 2 Engine Integration — WebSockets & WebRTC relay bridge, zero-touch Intel AMT / vPro CIRA hardware control, Tiered Wake-on-LAN peer relays, bidirectional group sync, and Authenticode-signed agent installers.

2. Fleet Governance & Administration

  • Hierarchical Policy Inheritance Engine — 4-tier cascading rules engine ($\text{Global} \rightarrow \text{Client} \rightarrow \text{Site} \rightarrow \text{Device Role}$) with tray reboot snooze limits, transparent forced reboot HUD timers, and live inheritance resolution.
  • Silent Background Management Suite — Interactive background PowerShell/Bash PTY shells, live Process & Services controller, stateful Remote Registry editor, Dual-Pane File Manager, Windows Event Viewer, and Task Scheduler manager.
  • Patch Management & Deployments — Windows Update staging, NVD CVE / CVSS v3.1 vulnerability scoring, OEM firmware driver catalogs, Winget/Chocolatey silent upgrades, and DISM/WUSA KB rollback.

3. Proactive Automation & Monitoring

  • Self-Healing & Script Orchestration — Condition-based watchdogs with circuit-breaker flap protection, RBAC-scoped script library, and $vitrine.* dynamic runtime token injection.
  • Network Discovery & Topology — Managed agent SNMP v3 probes, subnet ARP/IP sweeps, LLDP/CDP Layer-2 switch port mapping, and agentless hypervisor lifecycle management (Proxmox VE / VMware ESXi / Hyper-V).
  • Two-Way PSA & REST API — Bidirectional ticketing synchronization with ITFlow, full REST API reference, and Executive QBR PDF reporting.

💡 System Architecture Overview

graph TD
    Client[Managed Endpoints<br/>Windows / Linux / macOS] -->|TLS WebSocket Tunnel & CIRA| MC[MeshCentral 2 Engine]
    UI[Glassmorphic Web App<br/>React 18 + Vite] -->|REST & Live WebSockets| API[Vitrine Fastify Backend]
    API -->|Control Channel / RPC| MC
    API --> DB[(SQLite WAL Database)]
    API --> Vault[(AES-256-GCM LAPS & BitLocker Vault)]
    API --> Policy[4-Tier Hierarchical Policy Engine]
    API --> Watchdog[Self-Healing Watchdog & Circuit Breaker]
    API -->|RFC 3161 Authenticode| Signer[Code Signing & Installer Generator]
    API -->|Bi-Directional Sync| PSA[ITFlow PSA / Ticketing API]
    API -->|Outbound SMTP| Mail[SMTP Notification Relays]
Loading

Clone this wiki locally