CheckMK RAW 2.3.0p30 - TLS not activated warning

I don’t see it as an argument in the command syntax.
I think I had already tried it as it was suggested, but then I got an error that is was an invalid argument.

I assumed that it would ask for a password when the connection was going to be established.

Just try it the way I wrote it in the previous post. If you want help, you should accept it.

Try this:

Create a new user inside CheckMK and name it like checkmk-register. Be sure that the “checkmk-register” user got enough permissions.

Open CMD as administrator and type this:

“C:\Program Files (x86)\checkmk\service\cmk-agent-ctl.exe” register --hostname HOSTNAME --server FQDNOFCHECKMKSERVER --site SITENAME --user checkmk-register --password ‘PASSWORD’

“No Connection” means nothing else than that the host has no TLS encryption to the CheckMK.

Hi,

Apparently the port number is mandatory and needed to be specified with the hostname.

cmk-agent-ctl.exe register --server SERVER-FQDN:8000 --site CMKSITE --user USERNAME --hostname HOSTNAME

Maybe a future improvement for cmk-agent-ctl.exe could be that is uses the default port of 8000 so there would be no need to additionally specify it in the argument and would not cause confusions.

Maybe also a good idea to mention it also in the documentation if it is not already mentioned.

Many thanks guys!


Result:
Attempting to register at SERVER-FQDN, port 8000. Server certificate details:

PEM-encoded certificate:
-----BEGIN CERTIFICATE-----
.
.
.
-----END CERTIFICATE-----

Issued by:
Site 'CMKSITE ’ local CA
Issued to:
CMKSITE
Validity:
From Wed, 16 Apr 2025 18:30:43 +0000
To Mon, 16 Apr 2035 18:30:43 +0000

Do you want to establish this connection? [Y/n]

y

Please enter password for 'USERNAME ’

Registration complete.

If you have distributed monitoring, you use additional ports such as 8000, 8001, 8002 and so on.

This is also in the documentation.

Hi,

No distributed monitoring, one site only.