Best practice for certificate management in large Zabbix environments?

[Jannis Ehrnhofer]

Hello everyone,

I am currently looking into certificate-based encryption for a larger Zabbix environment and would like to understand what the recommended approach is in practice.

For organizations with many Proxies and hundreds or even thousands of Agents:
- What solution...

[adakne akash]

Hi everyone,

I've encountered an issue while trying to monitor a website certificate using Zabbix Agent 2 installed on a Zabbix Proxy. Here's a brief overview of the setup:

• Installed Zabbix Agent 2 on the Zabbix Proxy box.
• Created a certificate monitoring host on the Zabbix UI.
• Attached

...

[BitnotByte]

Hello,
I am building a zabbix system w/ proxys. I use zabbix in docker containers and proxy on external locations in docker, i want to encrypt from active proxy to server with certificates.

I started looking at hashicorp and want to use the pki feature and acme to make the workflow...

[a.naderi]

Hi Everyone

We are having some difficulty creating/importing an HTTPS certificate for Zabbix 6.2.9 (Debian)

I had been using this guide for reference:

Everything is working fine on https now but the issue is I couldn't verify my Self-signed certificate...

[Undocharted]

Hello.
I am trying to make a proof of concept with a Zabbix system using dockers. My dockers contains 4 containers, 1 container are mysql server, 2 container is zabbix server, 3 container is zabbix front end, and the last one is hashicorp vault.

I found out at zabbix offical docker...

[ssumrall]

Hello, I'm trying to configure Zabbix Agent 2 to use a certificate for passive checks. The configuration works fine if I start the agent from the command line (zabbix_agent2 -c zabbix_agent2.conf). If I start the agent as a serveice (systemctl restart zabbix-agent2.service) it fails. The logfile indicates...

[zaicnupagadi]

Hey Everyone,

I was testing PSK on one host for incomming connections - I was testing it with zabbix_sender and it worked out - great! So I tried to do encryption with certificates - also worked out Nice.

Switched host back to accept PSK, and run the same command...bum-...

[ZapDragon]

Hello,

Forgive me ahead of time.
Its 04:00 and I've been at this all day. I will likely make mistakes in this post, if I haven't already.

I have a Zabbix server hosted on a VPS and I want to setup Zabbix proxies in a few locations to help keep the monitoring centralized....

[batchen_regev]

Hey,

im using zabbix 4.0.4
and have passive proxy connected with a client connected to the proxy.
im trying to do a TLS secured connection unsuccessfully..


i this i did succeed with the server and the proxy BUT proxy and client arnt communicating,
here...

[Zabchix]

I monitor more than 80 sites with the zabbix template: SSL Certificates Check- Template SSL Cert Check External which works great.

Issue:
I have few sites that gets timeout from the external script.

currently my zabbix timeouts(from zabbix_server.conf) are:
...

[ranforward]

Dear ALL,

We need to monitor an https server that require two-way certificate authentication, which means the https/web server expects the client/Zabbix server to send over a valid certificate when it is trying to connect to the server pages/URLs.

We can use openSSL etc...