Icinga2 - new build Debian 12 - Windows agents can ping but no other checks

  • Version used (icinga2 --version)
    icinga2 --version
    icinga2 - The Icinga 2 network monitoring daemon (version: r2.15.0-1)

Copyright (c) 2012-2025 Icinga GmbH (https://icinga.com/)
License GPLv2+: GNU GPL version 2 or later https://gnu.org/licenses/gpl2.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

System information:
Platform: Debian GNU/Linux
Platform version: 12 (bookworm)
Kernel: Linux
Kernel version: 6.1.0-38-amd64
Architecture: x86_64

Build information:
Compiler: GNU 12.2.0
Build host: runner-hh8q3bz2-project-575-concurrent-0
OpenSSL version: OpenSSL 3.0.17 1 Jul 2025

Application information:

General paths:
Config directory: /etc/icinga2
Data directory: /var/lib/icinga2
Log directory: /var/log/icinga2
Cache directory: /var/cache/icinga2
Spool directory: /var/spool/icinga2
Run directory: /run/icinga2

Old paths (deprecated):
Installation root: /usr
Sysconf directory: /etc
Run directory (base): /run
Local state directory: /var

Internal paths:
Package data directory: /usr/share/icinga2
State path: /var/lib/icinga2/icinga2.state
Modified attributes path: /var/lib/icinga2/modified-attributes.conf
Objects path: /var/cache/icinga2/icinga2.debug
Vars path: /var/cache/icinga2/icinga2.vars
PID path: /run/icinga2/icinga2.pid

  • Enabled features (icinga2 feature list)

icinga2 feature list
Disabled features: command compatlog elasticsearch gelf graphite influxdb influxdb2 journald livestatus opentsdb perfdata syslog
Enabled features: api checker debuglog icingadb ido-mysql mainlog notification

  • Icinga Web 2 version and modules (System - About)
Icinga Web 2 Version 2.12.5
Git commit e0836c569734d6414c307ec0094cfed9a9dce694
PHP Version 8.2.28
Git commit date 2025-07-16
  • Config validation (icinga2 daemon -C)
    icinga2 daemon -C
    [2025-09-05 11:29:40 -0400] information/cli: Icinga application loader (version: r2.15.0-1)
    [2025-09-05 11:29:40 -0400] information/cli: Loading configuration file(s).
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Committing config item(s).
    [2025-09-05 11:29:40 -0400] information/ApiListener: My API identity: Master.domain
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 13 Notifications.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 2 NotificationCommands.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 IcingaApplication.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 3 HostGroups.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 3 Hosts.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 Downtime.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 Comment.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 IcingaDB.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 2 FileLoggers.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 IdoMysqlConnection.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 5 Zones.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 CheckerComponent.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 3 Endpoints.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 ApiUser.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 ApiListener.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 NotificationComponent.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 247 CheckCommands.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 User.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 UserGroup.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 3 ServiceGroups.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 3 TimePeriods.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 15 Services.
    [2025-09-05 11:29:40 -0400] information/ConfigItem: Instantiated 1 ScheduledDowntime.
    [2025-09-05 11:29:40 -0400] information/ScriptGlobal: Dumping variables to file ‘/var/cache/icinga2/icinga2.vars’
    [2025-09-05 11:29:40 -0400] information/cli: Finished validating the configuration file(s).

Hi
I have completed the deployment of Icinga 2 on Debian 12, everything appears to be operational.
I have then followed the install guide for Windows agents and configured the agents, requested certificates and successfully signed them on the Master.

The 2 windows agents can ping and show green, however when doing " disk check" i get error : Remote Icinga instance ‘windowsagent.domain’ is not connected to ‘Master.domain’

i searched articles on this forum and tried some of the steps for similar cases but no luck so far, i searched the logs on the master and keep seeing this error below, even though i have signed the certificates on the master.

[2025-09-05 10:54:27 -0400] notice/ApiListener: Current zone master: Master.domain
[2025-09-05 10:54:27 -0400] notice/ApiListener: Connected endpoints:
[2025-09-05 10:54:27 -0400] information/ApiListener: Reconnecting to endpoint ‘WindowsAgent1.domain’ via host ‘192.168.231.XX’ and port ‘5665’
[2025-09-05 10:54:27 -0400] information/ApiListener: Reconnecting to endpoint ‘WindowsAgent2.domain’ via host ‘192.168.231.XXX’ and port ‘5665’
[2025-09-05 10:54:27 -0400] warning/ApiListener: Certificate validation failed for endpoint ‘WindowsAgent1.domain’: code 18: self-signed certificate
[2025-09-05 10:54:27 -0400] information/ApiListener: New client connection for identity ‘WindowsAgent1.domain’ to [192.168.231.XX]:5665 (certificate validation failed: code 18: self-signed certificate)
[2025-09-05 10:54:27 -0400] notice/ApiListener: New JSON-RPC client
[2025-09-05 10:54:27 -0400] information/ApiListener: Finished reconnecting to endpoint ‘WindowsAgent1.domain’ via host ‘192.168.231.XX’ and port ‘5665’
[2025-09-05 10:54:27 -0400] notice/JsonRpcConnection: Received ‘icinga::Hello’ message from identity ‘WindowsAgent1.domain’.
[2025-09-05 10:54:27 -0400] debug/JsonRpcConnection: Processed JSON-RPC ‘icinga::Hello’ message for identity ‘WindowsAgent1.domain’ (took total 0ms).
[2025-09-05 10:54:27 -0400] warning/ApiListener: Certificate validation failed for endpoint ‘WindowsAgent2.domain’: code 18: self-signed certificate
[2025-09-05 10:54:27 -0400] information/ApiListener: New client connection for identity ‘WindowsAgent2.domain’ to [192.168.231.XXX]:5665 (certificate validation failed: code 18: self-signed certificate)
[2025-09-05 10:54:27 -0400] notice/ApiListener: New JSON-RPC client
[2025-09-05 10:54:27 -0400] information/ApiListener: Finished reconnecting to endpoint ‘WindowsAgent2.domain’ via host ‘192.168.231.XXX’ and port ‘5665’
[2025-09-05 10:54:27 -0400] notice/JsonRpcConnection: Received ‘icinga::Hello’ message from identity ‘WindowsAgent2.domain’.
[2025-09-05 10:54:27 -0400] debug/JsonRpcConnection: Processed JSON-RPC ‘icinga::Hello’ message for identity ‘WindowsAgent2.domain’ (took total 0ms).
[2025-09-05 10:54:27 -0400] notice/JsonRpcConnection: Error while reading JSON-RPC message for identity ‘WindowsAgent1.domain’: Error: End of file

Anyone had similar issue and can point me in the right direction ? so far i can only monitor pings for my agents

thank you in advance

T