Important Change: Agent Signature Keys Expiration

Dear Community!

We are introducing an important change in Checkmk 2.2, 2.3, and 2.4, regarding the agent signature keys expiration, that would require actions from your side.

Since Checkmk 2.2.0, the lifetime of the agent signature keys was limited 2 years, and imminent expiration of the keys would cause the Check_MK Agent service to go to a WARN/CRIT state, leading to increased number of notifications.

To avoid this, now Check_MK Agent service will no longer switch to a WARN/CRIT state before expiry but inform the admins in the Checkmk GUI instead – 90 days before the expiry you will receive a notification in GUI and only 20 days before – an email. Moreover, you can now see the expiry dates in the Agent Bakery, and the new keys will have not a 2-year but 10-year lifetime.

Please, update your keys based on the detailed instructions in Werk 17102.

6 Likes