encryption 101

[udi.mosh]

Hi,
i am trying to understand the encryption process and would appreciate the help.
i want to encrypt connection between agents and host, and i want to be able to make it automatic for all new added agents.
1. psk - if i use this, do i need to create a key for every agent ?
2. cert - same question as above.
what is the correct way and also assuming that i want to add hosts automatically using discovery rules.

10x.

[cyber]

psk - you can use same for all agents.
cert - It would be correct to have one for each, but its quite a pain to maintain... If you already have somekind of infra which distributes and maintains certs for each server, you can utilize those.. But tbh, I have not used those.

Discovery rules suck, autoregistration is much better option.

[udi.mosh]

no one is encrypting communications ?

[cyber]

psk - you can use same for all agents.
cert - It would be correct to have one for each, but its quite a pain to maintain... If you already have somekind of infra which distributes and maintains certs for each server, you can utilize those.. But tbh, I have not used those.

Discovery rules suck, autoregistration is much better option.

[udi.mosh]

thank you very much.