Agent not starting after configuring TLS PSK

[hleander57]

Initial agent setup worked and sustained connection

After configuring TLSPSK with these settings:
TLSConnect=psk
TLSAccept=psk
TLSPSKFile=/home/zabbix/zabbix_agentd.psk
TLSPSKIdentity=PSK ID 002

Created a new directory mkdir /home/zabbix

using psktool -u psk_identity -p /home/zabbix/zabbix_agentd.psk -s 32 and edit zabbix_agentd.psk to remove the "psk_identity:" prefix

ran sudo systemctl restart zabbix-agent - No Error
sudo systemctl status zabbix-agent with the following errors:

zabbix-agent.service - Zabbix Agent
Loaded: loaded (/lib/systemd/system/zabbix-agent.service; disabled; vendor preset: enabled)
Active: inactive (dead)

Nov 17 10:37:20 HLE-VPS01-nyc3-01 systemd[1]: Starting Zabbix Agent...
Nov 17 10:37:20 HLE-VPS01-nyc3-01 systemd[1]: zabbix-agent.service: PID file /run/zabbix/zabbix_agentd.pid not readable (yet?) after start: No such file or directory
Nov 17 10:37:20 HLE-VPS01-nyc3-01 systemd[1]: Started Zabbix Agent.
Nov 17 10:43:40 HLE-VPS01-nyc3-01 systemd[1]: Stopped Zabbix Agent.
Nov 17 10:43:40 HLE-VPS01-nyc3-01 systemd[1]: Starting Zabbix Agent...
Nov 17 10:43:40 HLE-VPS01-nyc3-01 systemd[1]: Started Zabbix Agent.
Nov 17 11:22:24 HLE-VPS01-nyc3-01 systemd[1]: Stopped Zabbix Agent.
Nov 17 11:22:24 HLE-VPS01-nyc3-01 systemd[1]: Starting Zabbix Agent...
Nov 17 11:22:24 HLE-VPS01-nyc3-01 systemd[1]: zabbix-agent.service: PID file /run/zabbix/zabbix_agentd.pid not readable (yet?) after start: No such file or directory
Nov 17 11:22:24 HLE-VPS01-nyc3-01 systemd[1]: Started Zabbix Agent

If I go back to the /etc/zabbix/zabbix_agentd.conf and comment out the TLSPSK settings the agentd restarts normally

I do have the ufw firewall enabled with a rule to allow connection only from the Zabbix server to port 10050.

Is there anything in my configuration that may be causing this issue??

Assistance on this issue would be greatly appreciated

[hleander57]

While waiting for approval, I found that there was a permission error in the zabbix_agentd.psk file. Using chmod u=rwx,g=r,o=r /home/zabbix/zabbix_agentd.psk. Now the encryption service is active and TLSPSK is reporting as ACTIVE in the UI.

Thought I would update this post with what allowed my encryption to be corrected