In our company, the the Icinga master is operated by Linux department.
When I install Icinga Agent on my Windows servers, how can I verify that they guys who operate the master have done the On-Demand CSR Signing?
Is there a command I can run on my agent to verify this?
Hi! Look in the mainlog of the Agent.
without the signed certificate, there will be a connection attempt followed by a warning with a removed api client … message
with a vaid certificate the log looks much different.
some key lines are “Updating received configuration file”
information/ApiListener: Stage: Updating received configuration file ‘C:\ProgramData\icinga2\var\lib\icinga2/api/zones-stage/director-global//director/servicesets.conf’ for zone ‘director-global’.