Hello,

This has been opened initially as a bug (ZBX-17965).
Since Zabbix 5.0, if you use Certificate mode as encryption (TLSConnect=cert and TLSAccept=cert), the host is not created at all and autoregistration is not working returning with error in the logs:

autoregistration from "XXXXXX" denied (host:"YYYYYYY" ip:"XXXXXXX" port:10050): connection type "TLS with certificate" is not allowed for autoregistration

When using zabbix 4.0 LTS during autoregistration, the host was created but the Encryption was set automatically to "No Encryption". I had configured the autoregistration action to "Run remote commands on current host" a script that ran an API call to change the encryption settings for this host to use Certificate.

Is it possible to implement the autoregistration with certificates, as we prefer to use them rather than PSK.

Kind regards,
Aggelos