Explore the latest product updates and best practices at our hybrid Checkmk Conference #12 from June 16-18, 2026 – Register here
back to website

Werk #19059: Support Diagnostics: Redact passwords in configuration files

Component Setup
Title Support Diagnostics: Redact passwords in configuration files
Date Jan 27, 2026
Level Trivial Change
Class New Feature
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
2.6.0b1
Not yet released 		Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.5.0b1
Not yet released 		Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

Checkmk scans all files before adding them to the Support Diagnostics dump. It redacts all passwords, secrets, tokens, keys, and similar sensitive data from the .mk files added. The Diagnostics UI page now reflects updated High/Medium/Insensitive categorization.

Please note the following limitations:

  • Verify manually that third-party or custom extensions integrated with the UI have their configuration data properly redacted.
  • Log files are also scanned but not fully covered by redaction. If you use higher log levels, manually verify these logs for sensitive data.
  • Files in $OMD_ROOT/var/check_mk/core are also not covered by redaction. Manually verify these files as well.

To the list of all Werks