Automated validation of data sources in a managed network

One or more non-transitory computer-readable media storing one or more programs that are configured, in response to execution by one or more processors, to cause a system to execute or control execution of operations, the operations comprising:

• receiving, at a client device, a public key of a system server;
• locally seeding the public key in a secure storage at the client device, wherein the seeding occurs when an agent is loaded on the client device;
• receiving a certificate list signed by a private key of the system server, the certificate list including one or more trusted device certificates associated with devices that are trusted by the system server;
• verifying a source of the certificate list using the seeded public key;
• initiating a communication session handshake process between the client device and a second device;
• receiving during the handshake process, a digital device certificate of the second device;
• halting the handshake process with the second device;
• during the halted handshake process, validating the second device using the digital device certificate of the second device based on the received certificate list having the verified source, the validating including:
• matching the received digital device certificate with one of the one or more trusted device certificates;
• responsive to a failure to match the received digital device certificate with the one or more trusted device certificates on the certificate list:
• communicating to the system server a request for a current certificate list, wherein the current certificate list includes one or more current trusted device certificates, and wherein the current certificate list is signed by the private key of the system server;
• verifying, by the client device, a signature on the current certificate list using the seeded public key;
• and
• reattempting to match the received digital device certificate of the second device with one of the one or more current trusted device certificates on the current certificate list;
• and
• based on the validating of the second device, managing a communication session with the second device to enable data transfer and performance of an operation by the client device.