Werk #3114: Linux and Windows agent can now encrypt their output

Komponente Core & setup
Titel Linux and Windows agent can now encrypt their output
Datum 05.04.2016
Checkmk Edition Checkmk Raw (CRE)
Checkmk-Version 1.4.0i1 1.5.0i1
Level Bedeutende Änderung
Klasse Neues Feature
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen

This feature can be configured through {{Host & Service Parameters|Access to agents|Encryption}}. When {{Encryption for Agents}} is set to {{enforce}} or {{enable}}, two things will happen:

LI:Baked Windows or Linux agents will be configured to encrypt their output LI:Check_mk will be configured to try to decrypt output from agents.

In case of {{enable}} it will also accept unencrypted output, in case of {{enforce}} it won't.

This change also affects real-time updates as these were already encrypted. The passphrase configured for real-time updates will now only serve as a default, agents with "Encryption" configured will use the same passphrase for rt and regular updates. Finally, it is now also possible to configure real-time updates to be unencrypted.

All encryption happens with AES using 256 bit keys and CBC.

The new encryption feature is completely optional, the default behaviour for everything (including real-time updates) is compatible with previous versions.

Zur Liste aller Werks