Best practice of working with psk.key

[Aer0]

Hello everyone!

I'm working with both systems, Windows and Linux.

Both systems has Agent2 with PSK Encryption setting.

Zabbix has recomendation: "Set access rights to PSK file - it must be readable only by Zabbix user" and we did it for Linux system, but what about Windows?

Agent 2 service started with System access rights, do we need to left only "System Read" setting for that file?

What is your Best practice for that on Windows?

Thank you.

[toxi]

Hi! I didn't think about the Windows system permissions and left it as is. Everything works without any problems.

[cyber]

Of course it works fine with default settings.. Question was, how to restrict psk file access, I think. I have no idea, how our admins have done it, but I, as normal user in windows host, cannot open that psk file. It says I have to have at least read permissiosn to access it... So there are options, but ....

[toxi]

This is usually configured here (see screenshot) in the properties of each file/folder.

[cyber]

Yea, I can understand that.. I just do not know, what perms were removed and what was kept..