[ZBX-18228] connection type "TLS with certificate" is not allowed for autoregistration Created: 2020 Aug 11  Updated: 2024 Oct 16  Resolved: 2020 Aug 12

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Server (S)
Affects Version/s: 5.0.2
Fix Version/s: None

Type: Incident report Priority: Trivial
Reporter: olivier E Assignee: Zabbix Support Team
Resolution: Won't fix Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Duplicate

 Description   

hello,

  • i am doing some testing with zabbix-server 5.0.2 and while trying to do autoregistration with a zabbix-agent using certificates, i am getting this error in zabbix_server.log and agent is not getting registred. This used to work with zabbix4. In the web UI of Zabbix5 in the Administration=>General=>autoregistration, i don't see Encryption level Certificate.
    It looks like autoregistration with certificate is not supported by zabbix5. Could you confirm that ? Do you know if it will be supported ? Or is there something to configure ?

thank you

  • my /etc/zabbix/zabbix_agentd.conf is
    TLSConnect=cert
    TLSAccept=cert
    TLSCAFile=/etc/zabbix/cert_serv/zabbix_server_tlscafile
    TLSCertFile=/etc/zabbix/cert_serv/zabbix_server_tlscertfile
    TLSKeyFile=/etc/zabbix/cert_serv/zabbix_server_tlskeyfile
    TLSServerCertSubject=CN=zabbix
  • zabbix_server.log
    10644:20200811:120842.468 cannot send list of active checks to "127.0.0.1": host [zabbix] not found
    10644:20200811:121042.660 autoregistration from "127.0.0.1" denied (host:"zabbix" ip:"127.0.0.1" port:10050): connection type "TLS with certificate" is not allowed for autoregistration


 Comments   
Comment by Dmitrijs Lamberts [ 2020 Aug 12 ]

Only PSK is supported:
https://www.zabbix.com/documentation/4.4/manual/introduction/whatsnew440#secure_autoregistration

Closing as Won't fix

Generated at Fri May 23 07:59:35 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.