Remote Icinga instance ‘client’ is not connected to ‘master’

Icinga 2
1

Hi There,

I try to get the Powershell Framework working, but always get following error

SNAG-0010
SNAG-0010789×304 45.4 KB 

root@monitoring:/home/user# icinga2 ca list
Fingerprint                                                      | Timestamp                | Signed | Subject
-----------------------------------------------------------------|--------------------------|--------|--------

I already read alot about the CA but as you can see there is no ca to list in my monitoring.
The monitored Server is a Windows Server 2022 Datacenter.

My Icinga2 Installation

root@monitoring:/home/user# icinga2 feature list
Disabled features: compatlog debuglog elasticsearch gelf graphite icingadb influxdb2 livestatus opentsdb statusdata syslog
Enabled features: api checker command ido-mysql influxdb mainlog notification perfdata

root@monitoring:/home/user# icinga2 --version
icinga2 - The Icinga 2 network monitoring daemon (version: r2.13.2-1)

Copyright (c) 2012-2021 Icinga GmbH (https://icinga.com/)
License GPLv2+: GNU GPL version 2 or later <https://gnu.org/licenses/gpl2.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

System information:
  Platform: Debian GNU/Linux
  Platform version: 11 (bullseye)
  Kernel: Linux
  Kernel version: 5.10.0-10-amd64
  Architecture: x86_64

Build information:
  Compiler: GNU 8.3.0
  Build host: runner-hh8q3bz2-project-298-concurrent-0
  OpenSSL version: OpenSSL 1.1.1k  25 Mar 2021

Application information:

General paths:
  Config directory: /etc/icinga2
  Data directory: /var/lib/icinga2
  Log directory: /var/log/icinga2
  Cache directory: /var/cache/icinga2
  Spool directory: /var/spool/icinga2
  Run directory: /run/icinga2

Old paths (deprecated):
  Installation root: /usr
  Sysconf directory: /etc
  Run directory (base): /run
  Local state directory: /var

Internal paths:
  Package data directory: /usr/share/icinga2
  State path: /var/lib/icinga2/icinga2.state
  Modified attributes path: /var/lib/icinga2/modified-attributes.conf
  Objects path: /var/cache/icinga2/icinga2.debug
  Vars path: /var/cache/icinga2/icinga2.vars
  PID path: /run/icinga2/icinga2.pid

Hope anybody can help me…
Thanx in advance
Susie

2

Hi & welcome to the icinga community,

Which steps did you do? Did you run icinga2 node wizard?

BTW: You have enabled influxdb and perfdata. Is this by accident?

3

Hi Roland,

in Icinga I did nothing… thought icinga director will do that for me :slight_smile:

I did following on the Server:

Set-ExecutionPolicy -ExecutionPolicy Unrestricted

[Net.ServicePointManager]::SecurityProtocol = 'tls12, tls11';
$ProgressPreference                         = 'SilentlyContinue';
[string]$ScriptFile                         = 'C:\Users\Public\IcingaForWindows.ps1';

Invoke-WebRequest `
    -UseBasicParsing `
    -Uri 'https://monitoring/IcingaForWindows/IcingaForWindows.ps1' `
    -OutFile $ScriptFile;

& $ScriptFile -IcingaRepository 'https://monitoring/IcingaForWindows/stable/ifw.repo.json' -skipwizard

Use-Icinga;

Enable-IcingaUntrustedCertificateValidation;

Start-IcingaAgentInstallWizard `
    -UseDirectorSelfService 1 `
    -DirectorUrl 'https://monitoring/icingaweb2/director' `
    -SelfServiceAPIKey 'myAPIKey' `
    -OverrideDirectorVars 0 `
    -ConvertEndpointIPConfig 1 `
    -AcceptConnections 1 `
    -EmptyCA 0 `
    -CAFile 'https://monitoring/ca.crt' `
    -InstallFrameworkPlugins 1 `
    -InstallFrameworkService 1 `
    -PluginsUrl 'https://monitoring/IcingaForWindows/stable/plugins'  `
    -FrameworkServiceUrl 'https://monitoring/IcingaForWindows/stable/service' `
    -ServiceDirectory 'C:\Program Files\icinga-framework-service\' `
    -PackageSource 'https://monitoring/IcingaForWindows/stable/agent' `
    -RunInstaller

Oh my coworker did this, I know that we tried to get pnp4nagios to work, I think that’s why we have perfdata running

Greetz
Susie

4

OK What else I have is the icinga2 daemon -C command… It’s a loooong list:

[2021-12-21 10:16:47 +0100] information/cli: Icinga application loader (version: r2.13.2-1)
[2021-12-21 10:16:47 +0100] information/cli: Loading configuration file(s).
[2021-12-21 10:16:47 +0100] information/ConfigItem: Committing config item(s).
[2021-12-21 10:16:47 +0100] information/ApiListener: My API identity: monitoring



[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'SELinux Mode' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4824:1-4824:28) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Swap Usage' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4832:1-4832:26) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - auditd.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4840:1-4840:45) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - sshd.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4849:1-4849:43) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - systemd-journald.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4858:1-4858:55) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Units Failed' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4868:1-4868:36) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Top3 Processes Which Caused The Most I/O' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4876:1-4876:56) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Uptime' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4884:1-4884:22) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Users' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4892:1-4892:21) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Starface Database Stats' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4906:1-4906:39) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Starface Java Status' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4914:1-4914:36) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Starface Channel Status' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4922:1-4922:39) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Starface Status' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4930:1-4930:31) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Starface Backup Status' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4938:1-4938:38) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Starface Account Stats' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4946:1-4946:38) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Starface Peer Stats' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4954:1-4954:35) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'About me' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4968:1-4968:24) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'CPU Usage' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4976:1-4976:25) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Disk Usage' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4984:1-4984:26) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'DNS' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 4992:1-4992:19) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'File Descriptors' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5000:1-5000:32) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'File Ownership' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5008:1-5008:30) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'File Size - /var/log/messages' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5017:1-5017:45) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'FS inodes' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5026:1-5026:25) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'FS RO' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5034:1-5034:21) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Getent' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5042:1-5042:22) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Icinga' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5050:1-5050:22) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Kernel Ring Buffer (dmesg)' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5058:1-5058:42) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Load' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5066:1-5066:20) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Memory Usage' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5074:1-5074:28) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Network Connections' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5082:1-5082:35) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Procs' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5090:1-5090:21) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Swap Usage' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5098:1-5098:26) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - cron.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5106:1-5106:43) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - rsyslog.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5115:1-5115:46) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - ssh.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5124:1-5124:42) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - systemd-journald.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5133:1-5133:55) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Units Failed' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5142:1-5142:36) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - network.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5150:1-5150:46) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Apache Status' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5165:1-5165:29) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - apache2.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5173:1-5173:46) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - snmpd.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5191:1-5191:44) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - notify-and-schedule.timer' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5208:1-5208:56) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Systemd Unit - notify-and-schedule.service' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5218:1-5218:58) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Jitsi Videobridge Stats' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5236:1-5236:39) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'Jitsi Videobridge Status' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5244:1-5244:40) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'NodeBB Stats' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5258:1-5258:28) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'NodeBB Status' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5266:1-5266:29) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] warning/ApplyRule: Apply rule 'NodeBB Version' (in /var/lib/icinga2/api/packages/director/05850b4d-a07a-4e2a-ba2e-f5672ab5f8e6/zones.d/director-global/servicesets.conf: 5274:1-5274:30) for type 'Service' does not match anywhere!
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 33 Notifications.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 IcingaApplication.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 9 NotificationCommands.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 43 HostGroups.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 350 Hosts.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 Downtime.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 2 Comments.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 FileLogger.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 CheckerComponent.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 ApiListener.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 IdoMysqlConnection.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 7 Zones.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 ExternalCommandListener.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 5 Endpoints.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 ApiUser.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 InfluxdbWriter.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 619 CheckCommands.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 NotificationComponent.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 UserGroup.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 User.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 13 TimePeriods.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 7 ServiceGroups.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 ScheduledDowntime.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 3683 Services.
[2021-12-21 10:16:49 +0100] information/ConfigItem: Instantiated 1 PerfdataWriter.
[2021-12-21 10:16:49 +0100] information/ScriptGlobal: Dumping variables to file '/var/cache/icinga2/icinga2.vars'
[2021-12-21 10:16:49 +0100] information/cli: Finished validating the configuration file(s).
5

Aha, it’s an existing and operational installation and you want to add a new host. I’m out since I’m not using Icinga for Windows.

6

Yes it’s an existing and operational installation.

A pity that you’re out… but still hoping for others to help :slight_smile:

7

Did you check, that you have the permissions on the windows side to call the checks?
There are some videos on youtoube, e.g. Icinga for Windows v1.6.0 - Preview and Q&A - YouTube
Or search for ‘icinga for windows’ on youtube, maybe you find soemthing useful there.
Regards, Matthias

8

Hi Susie,

Just to be sure:

  • the IcingaforWindows components are hosted locally on the Monitoring server?
  • the ca.crt file is published by the monitoring server as well?

Is the network between the master and the agent restricted in some way?
Meaning: Can the agent and the master communicate over tcp/5665?

Is the public ca file and machine certs present on the agent under %ProgramData%\icinga2\var\lib\icinga2\certs?
What do the logs under %ProgramData%\icinga2\var\log\icinga2 say?