Skip to main content
Question

Unsecure install of Centreon Monitoring Agent

  • June 23, 2025
  • 8 replies
  • 109 views

Forum|alt.badge.img+1

Hello, 

I would like to test Centreon Monitoring Agent on my LAB Centreon, freshly updated on 24.10.7. 

I followed the installation manual here : https://docs.centreon.com/fr/pp/integrations/plugin-packs/getting-started/how-to-guides/cma/

I understood that the connection between the poller and CMA agent must be secure on production. 

This means it may not be required in a demo/test environment. However, I can't find any further information on this.

Also, the "Public certificate file name" and "Private key file name" fields in the Poller/agent configuration section seem to be mandatory. Does this mean that the poller-agent connection must be secure regardless of the environment?

Thanks!

8 replies

fmattes
Centreonian
Forum|alt.badge.img+10
  • Centreonian
  • June 23, 2025

Hi, 

Thanks for your interest in Centreon Monitoring Agent

No TLS option is provided in 24.10.8 (web) / 24.10.7 (collect) version of Centreon.

So you may need an update.

 

You will find No TLS documentation in this section : https://docs.centreon.com/pp/integrations/plugin-packs/getting-started/how-to-guides/cma/#testing-mode-unencrypted-communication

Telle me if you need more detail on this.

 

The certificates in Poller/agent configuration are mandatory only if you select “TLS” option.

Otherwise, they are not present (as said, this option is only available in 24.10.8 webapp)


Forum|alt.badge.img+1
  • Author
  • Steward *
  • June 24, 2025

Thanks for your reply!

 

It seems to work with my host when the agent initiates the connection with the poller (passive mode). I would like to switch to active mode. According to the manual, the checks are OK, but I can’t acknowledge the alerts, so I deduce that the host is still in passive mode.

 

Second question: in production, we will have around 500 hosts (on 20 pollers). Is there a way to bulk select hosts in the poller/agent configuration (under the "host configurations" step)?


fmattes
Centreonian
Forum|alt.badge.img+10
  • Centreonian
  • June 24, 2025

Hi,

you are welcome !

What’s exactly the problem/error message on acknowledgements ? It should work in both modes.

There is no active mode for now in Centreon Monitoring Agent, the two connection mode are only for the connection initialization. Once the connection is established, the communication is done the same way on both modes, but remains passive. You can check the schema here : https://docs.centreon.com/pp/integrations/plugin-packs/getting-started/how-to-guides/cma/#how-do-the-host-and-the-poller-interact, you will see that only the first arrow (initiate) changes.

 

For 500 hosts on 20 pollers, i suggest to use API in order to popule Agent configuration.

Let me know if you need API examples.

 

 


Forum|alt.badge.img+1
  • Author
  • Steward *
  • June 25, 2025

Thank you Florian !

If it’s possible, I would like some examples ;-)

 


fmattes
Centreonian
Forum|alt.badge.img+10
  • Centreonian
  • June 25, 2025

Here is an example (we will improve the API documentation on this) : 

Tell me if you need more help on this, and we will plan a meet.

{
"type": "centreon-agent",
"name": "my-agent-conf",
"connection_mode": "secure",
"poller_ids": [
5
],
"configuration": {
"is_reverse": true,
"otel_public_certificate": "poller_certif.crt",
"otel_private_key": "poller_key.key"}
],
"hosts": [
{
"address": "1.2.3.4",
"port": 443,
"poller_ca_certificate": "poller_certif.crt",
"poller_ca_name": "poller_name"}
}
]
}
}

 


Forum|alt.badge.img+1
  • Author
  • Steward *
  • June 26, 2025

Why not for a meet, if possible.  Thanks Florian!

How can we organise ourselves ?


fmattes
Centreonian
Forum|alt.badge.img+10
  • Centreonian
  • June 26, 2025

I sent you a private message


Forum|alt.badge.img+1
  • Author
  • Steward *
  • June 30, 2025

Done! Thanks