Centreon migration to 25.10 - Macros can't be decrypted

In addition to context, i used the APIV2 “Fully update the platform”  to finish my migration from the 24.10
Centreon Web RestAPI

This can be related as there was a step to do the migration to encrypted pollers from here, unsure if that’s the main source of the issue.

I keep on digging but I can’t find the origin of the issue. It’s specific to the password type macros, they have access to the /etc/centreon-engine/engine-context.json extracted from the centreon instance but fail when decrypting the macro.

Found the origin code in the collect project in the centreon engine codebase, but it’s using a shared aes encryption library, i can’t figure out why it would fail decrypting the variable in my case. Maybe some system library for Rocky 9 doesn’t ally decryption or has a bug. I’m completely lost on that one. If anyone has an idea ?

Hello Alexandre,

Same issue here with Centreon 25.10 but on Debian 12.12

We also tried to update the symetric keys on the poller with no luck.

No updates on this yet ? It’s forbidding me to use any encrypted macros on the 25.10, making it a no go for me for now.

I have a almost similar problem with the vcenter plugin, but not with macros

where are you getting your log wihth the “fail to decrypt”?, and what type of macro are not working? (normal macros or “password” macro where you check the box password?)

so far I don’t see any check failing on my pollers, with a lot of various macros, custom made, or from the pack, but I don’t use “password” macros, i’ll try some to see if there is an issue.

central and pollers are all running on alma8, all patched fully (including OS, kernel, libs) 3 days ago when upgrading to 25.10.

edit:
just checked a HPE ilo check with a password for api rest and marcros for all the option below
 

the password is hidden here with ***, I don’t see error in the centengine log, and the check is working.

the issue is I don’t know how to be sure there are any encryption done

From what i understood.
The encryption is done on the database for password macros (that’s the issue i have with macros). When it is exported to pollers, the data is sent and it is decrypted locally with the encryption key stored on each poller https://docs.centreon.com/docs/upgrade/upgrade-from-24-10/#retrieving-the-decryption-key 

But in here, my system fails internally to decrypt the values of the macros, it seems the internal software within the centreon-engine is failing to decrypt, maybe due to some issues with some crypt library or ssl something.

That’s the little information i have so far.