For the purpose of registering agents, both for agent updates and for TLS encryption, it might be desirable to have a dedicated user and role at hand.
This article outlines , how that can be achieved.
...
The easiest way to build an agent registration role is by using the GUI and following these steps:
...
| Note |
|---|
We always recommend using the GUI instead of modifying .mk files. For any issue or broken config, we do not provide any support. On In exceptional circumstances, you might want to adjust configuration files with caution. Please do a backup before adjusting the files. |
...
For a user to be able to do the cmk-agent-ctl register, which is needed to enable the TLS encryption (available from 2.1.0 onwards), you have to add the following rights (internal name "general.agent_pairing") to his/her their role.
- Agent pairing
- Read access to all hosts and folders
- Write access to all hosts and folders
At the end, the whole file should look like this:
...