CMA : Utilisation du magasin d’autorités de certification Windows \ Use of the Windows Certification Authorities Store

Hi,

yes, it’s possible to store CMA certificates in Windows Certification Authorities Store, if you are using “Agent-initiated connection” mode.

Hello,

I am correctly configured in “Agent-initiated connection” mode.
What configuration is required on the agent side to instruct it to validate certificates using the Windows certificate store?

I tried leaving the CA field empty, but this does not work.

For your information, my CA certificates are installed in the Local Computer certificate store, under Intermediate Certification Authorities.

Thank you in advance.

Hi,

Thanks for your feedback.

Could you indicate your CMA version, and how you configured other certifcate fields ? 

All certificate fields should be empty.

Could you also send me in private (or post here) CMA logs, in debug mode ? 

Thanks

CMA version: 24.10.11
If I am not mistaken, in “Agent-initiated connection” mode there is only the Certificates > CA field, and it is indeed empty in my configuration.

Here are the logs.

[2025-12-15 13:24:20.311] [centreon-monitoring-agent] [error] [bireactor.cc:191] 0x17f31d33950 peer:POLLER-adm:4317 client::OnDone(failed to connect to all addresses; last error: UNKNOWN: ipv4:X.X.X.X:4317: Ssl handshake failed (TSI_PROTOCOL_FAILURE): SSL_ERROR_SSL: error:0A000086:SSL routines::certificate verify failed: unable to get local issuer certificate) 
[2025-12-15 13:24:20.322] [centreon-monitoring-agent] [debug] [bireactor.cc:58] delete client this=0x17f31d33950 peer:POLLER-adm:4317
[2025-12-15 13:24:21.359] [centreon-monitoring-agent] [info] [ssl_transport_security.cc:1665] Handshake failed with error SSL_ERROR_SSL: error:0A000086:SSL routines::certificate verify failed: unable to get local issuer certificate
[2025-12-15 13:24:23.162] [centreon-monitoring-agent] [info] [ssl_transport_security.cc:1665] Handshake failed with error SSL_ERROR_SSL: error:0A000086:SSL routines::certificate verify failed: unable to get local issuer certificate
[2025-12-15 13:24:25.944] [centreon-monitoring-agent] [info] [ssl_transport_security.cc:1665] Handshake failed with error SSL_ERROR_SSL: error:0A000086:SSL routines::certificate verify failed: unable to get local issuer certificate
[2025-12-15 13:24:30.068] [centreon-monitoring-agent] [info] [ssl_transport_security.cc:1665] Handshake failed with error SSL_ERROR_SSL: error:0A000086:SSL routines::certificate verify failed: unable to get local issuer certificate
[2025-12-15 13:24:30.326] [centreon-monitoring-agent] [debug] [bireactor.cc:52] create client this=0x17f31d33950 peer:POLLER-adm:4317
[2025-12-15 13:24:30.327] [centreon-monitoring-agent] [error] [bireactor.cc:100] 0x17f31d33950 client peer:POLLER-adm:4317 fail read from stream
[2025-12-15 13:24:30.358] [centreon-monitoring-agent] [error] [bireactor.cc:150] 0x17f31d33950 client peer POLLER-adm:4317 fail write to stream
[2025-12-15 13:24:30.358] [centreon-monitoring-agent] [debug] [bireactor.cc:200] 0x17f31d33950 client::shutdown
[2025-12-15 13:24:30.358] [centreon-monitoring-agent] [error] [bireactor.cc:191] 0x17f31d33950 peer:POLLER-adm:4317 client::OnDone(failed to connect to all addresses; last error: UNKNOWN: ipv4:X.X.X.X:4317: Ssl handshake failed (TSI_PROTOCOL_FAILURE): SSL_ERROR_SSL: error:0A000086:SSL routines::certificate verify failed: unable to get local issuer certificate) 

Hi,

Thanks, i created an issue about this, it may be a bug or a best practice which need a documentation. 

I will keep you informed.