Cloudflare R2 Integration

Quick Setup Guide

1. Create R2 Bucket

Set up your Cloudflare R2 storage bucket

⚙️

2. Configure Script

Fill in your R2 credentials and settings

🚀

3. Deploy

Run the generated script on your endpoints

Step 1: Create Your R2 Bucket for Binary Distribution

1. Log into Cloudflare Dashboard
2. Navigate to R2 Object Storage → Overview
3. Click "Create bucket"
4. Enter bucket name (e.g., certscanner-binaries) for binary distribution
5. Select your preferred location
6. After bucket creation, click on your bucket name
7. Create a binaries/ folder by clicking "Upload" → "Folder"
8. Upload platform-specific TYCHON Quantum Readiness binaries to the binaries/ folder:
- • certscanner-windows-amd64.exe (Windows)
- • certscanner-linux-x64 (Linux)
- • certscanner-darwin-amd64 (macOS Intel)
- • certscanner-darwin-arm64 (macOS ARM)
9. Go to Settings tab → Public access
10. Enable "Allow public read access" for the bucket
11. Verify URLs work by testing: https://your-account-id.r2.cloudflarestorage.com/your-bucket-name/binaries/certscanner-linux-x64
12. Go to Manage R2 API tokens → Create API token (for scan results storage)
13. Select "Custom token" with R2:Edit permissions
14. Copy your Account ID, Access Key ID and Secret Access Key

Step 2: Configure Your Deployment

Binary Configuration

Configure your R2 bucket for hosting TYCHON Quantum Readiness binaries. Upload the platform-specific binaries to your R2 bucket's 'binaries/' folder, then specify your Account ID and bucket name below. This enables global edge distribution with zero egress fees and eliminates external dependencies.

Cloudflare Account ID

R2 Bucket Name (for binaries)

Platform Binary Names & SHA256 Hashes

Windows Binary

Windows SHA256

Linux Binary

Linux SHA256

macOS Intel Binary

macOS Intel SHA256

macOS ARM Binary

macOS ARM SHA256

Scan Configuration

Define how TYCHON Quantum Readiness will operate on your endpoints. Configure scan scope, output format for your security tools, and automation schedule to ensure continuous cryptographic monitoring.

Scan Mode

Output Format

Scan Tags

Schedule

Remote Scan Options

Target Hosts

One per line or comma-separated: hostnames, IPs, CIDR ranges, IP ranges

Target Ports

Comma-separated: single ports and/or ranges

Exclude File (optional)

Detailed Cipher Enumeration (-cipherscan) Quick Scan Mode (-quickscan)

Include Empty Ports (-include-empty-ports)

Local Scan Options

Filesystem Certificate Scan (-scanfilesystem) Memory Crypto Libraries (-scanmemory) Active Connections (-scanconnected)

Outlook Archives (-scanoutlookarchives) Disable Database Tracking (-disable-database) ARP Table Scan (-arpscan)

Cloudflare R2 Configuration (Optional)

Configure R2 storage for scan results. Leave blank to only install the scanner without automatic uploads. When configured, scan results will be automatically uploaded to your R2 bucket with zero egress fees.

How to Set Up R2 API Access

1. Create an R2 Bucket
- • Log in to your Cloudflare Dashboard
- • Navigate to R2 Object Storage in the sidebar
- • Click "Create bucket" and choose a name (e.g., "crypto-scan-results")
- • Note your Account ID shown at the top of the R2 page
2. Create API Token
- • In R2, click "Manage R2 API Tokens"
- • Click "Create API token"
- • Set Token name: "certscanner-deployment"
- • Under Permissions, select:
- ✓ Object Read & Write (required for uploading scan results)
- • Under R2 Bucket, select:
- ○ "Apply to specific buckets only"
- ○ Select your bucket from the dropdown
- • Set TTL: "Forever" or your preferred duration
- • Click "Create API Token"
3. Copy Credentials
- • After creating the token, you'll see:
- - Access Key ID (copy this below)
- - Secret Access Key (copy this below - shown only once!)
- • ⚠️ Important: Save the Secret Access Key immediately - it won't be shown again

Security Note: Keep your API credentials secure. These tokens provide access to your R2 bucket. Never commit them to source control or share them publicly.

Account ID

Bucket Name

Access Key ID

Secret Access Key

Step 3: Generated Deployment Scripts

PowerShell Deployment Script

Step 4: Run Your Deployment Script

Windows (PowerShell)

1. Open PowerShell as Administrator
2. Download the generated PowerShell script
3. Run: Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser
4. Execute: .\Deploy-TYCHON Quantum Readiness-R2.ps1

Linux/macOS (Bash)

1. Download the generated bash script
2. Make executable: chmod +x deploy-certscanner-r2.sh
3. Run with sudo: sudo ./deploy-certscanner-r2.sh

Python (Advanced Orchestration)

1. Install requirements: pip install requests
2. Download the generated Python script and config.json
3. Run: python3 deploy_certscanner_r2.py --config config.json

Step 5: Verify Installation

Quick Verification Steps

1. Check that TYCHON Quantum Readiness binary was installed successfully
2. Verify R2 connectivity test passed
3. Confirm automated scan is scheduled (Task/Service/Cron)
4. Validate initial scan results uploaded to R2 bucket
5. Monitor R2 bucket for ongoing scan uploads

View Your Scan Results

Access your scan results in the Cloudflare Dashboard:

1. Go to R2 Object Storage → Your Bucket
2. Navigate to the scans/ or initial-scan/ folders
3. Download scan files to analyze with your security tools
4. Set up Workers for automated processing (optional)