Werk #22304: Embed certificates for the agent controller
| Component | Core & setup | ||
| Title | Embed certificates for the agent controller | ||
| Date | Oct 9, 2026 | ||
| Level | Trivial Change | ||
| Class | New Feature | ||
| Compatibility | Compatible - no manual interaction needed | ||
| Checkmk versions & editions |
|
The new option "Embed certificates" of the agent rule "Agent Controller" bakes additional CA certificates into the agent package. The agent controller trusts each one, on top of the certificate it receives when it registers, but only on connections to the site the certificate belongs to.
This lets hosts trust a site's upcoming CA before the CA is rotated, so they don't need to re-register afterwards.