I'm having issues which from all the searching I have done seems to be an on going bug. First install of Zabbix in our company so on a learning curve at the moment. We have the latest version running (6.4) and are using Agent2 for hosts
I have set a PSK in Administration--General--Autoregistration. And then using MSI this has been configured with the following options:
Server=ServerNameFQDN
ServerActive=ServerNameFQDN
TLSPSKIDENTITY=PSK001
TLSPSKVALUE=PSKKey#
TLSACCEPT=psk
TLSCONNECT=psk
HostMetadataItem=system.uname
I have double checked and the key used in the Server AR side is identical to the MSI version. I have configured the Action for autoregistration based on the HostMetadataItem results. This works fine the first time a host attempts to autoregister. All other hosts then fail. The server log continually shows these error messages:
1512:20240510:111443.988 autoregistration from "*.*.*.*" denied (host:"###" ip:"*.*.*.*" port:10050): connection used PSK which is not configured for autoregistration
1512:20240510:111443.988 cannot send list of active checks to "*.*.*.*": host [###] not found
1514:20240510:111448.056 host PSK and autoregistration PSK have the same identity "PSK001" but different PSK values, autoregistration will not be allowed
Spent a while now searching for a solution and all I seem to find are references to the issue with no fix going back many versions.
Tried reboots, and starting from scratch with the PSK config. all same result.
Some of my searching has found Secure Autoregistration : r/zabbix (reddit.com) and this which is exact issue but seems unresolved [ZBX-20409] Secure Autoregistration not working as described - ZABBIX SUPPORT
I have set a PSK in Administration--General--Autoregistration. And then using MSI this has been configured with the following options:
Server=ServerNameFQDN
ServerActive=ServerNameFQDN
TLSPSKIDENTITY=PSK001
TLSPSKVALUE=PSKKey#
TLSACCEPT=psk
TLSCONNECT=psk
HostMetadataItem=system.uname
I have double checked and the key used in the Server AR side is identical to the MSI version. I have configured the Action for autoregistration based on the HostMetadataItem results. This works fine the first time a host attempts to autoregister. All other hosts then fail. The server log continually shows these error messages:
1512:20240510:111443.988 autoregistration from "*.*.*.*" denied (host:"###" ip:"*.*.*.*" port:10050): connection used PSK which is not configured for autoregistration
1512:20240510:111443.988 cannot send list of active checks to "*.*.*.*": host [###] not found
1514:20240510:111448.056 host PSK and autoregistration PSK have the same identity "PSK001" but different PSK values, autoregistration will not be allowed
Spent a while now searching for a solution and all I seem to find are references to the issue with no fix going back many versions.
Tried reboots, and starting from scratch with the PSK config. all same result.
Some of my searching has found Secure Autoregistration : r/zabbix (reddit.com) and this which is exact issue but seems unresolved [ZBX-20409] Secure Autoregistration not working as described - ZABBIX SUPPORT