- Yes, the fqdn specified in the register command is the checkmk server.
- Yes, the agent was signed, baked and pulled from the same checkmk server as item #1.
- No proxy but these are in different datacenters so firewalls are a factor however, the peer servers that registered fine are in the same subnet.