as the first parame- ter, allowing to specify both HTTP and HTTPS protocols. As a prerequisite of SSL (HTTPS) functionality, the agent should be compiled with cURL support. Previously, only domain name various items and hosts, SNMPv3 authentication and privacy passphrases, passwords for media types; SSL key password and HTTP proxy fields used in web scenarios and HTTP items; usernames, passwords and dropped to the specified user. Revoke write access to SSL configuration file in Windows Zabbix Windows agent compiled with OpenSSL will try to reach the SSL configuration file in c:\openssl-64bit. The ”openssl-64bit”

as the first param- eter, allowing to specify both HTTP and HTTPS protocols. As a prerequisite of SSL (HTTPS) functionality, the agent should be compiled with cURL support. Previously, only domain name Setting up SSL for Zabbix frontend On RHEL/Centos, install mod_ssl package: yum install mod_ssl Create directory for SSL keys: mkdir -p /etc/httpd/ssl/private chmod 700 /etc/httpd/ssl/private Create Create SSL certificate: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/httpd/ssl/private/apache-selfsigned.key -out /etc/httpd/ssl/apache-selfsigned.crt 44 Fill out the prompts appropriately

various items and hosts, SNMPv3 authentication and privacy passphrases, passwords for media types; SSL key password and HTTP proxy fields used in web scenarios and HTTP items; usernames, passwords and 2 plugin WebCertificate is now available allowing to monitor validity and expiration dates of TLS/SSL website certificates. • Plugins MySQL and PostgreSQL now support encrypted TLS connection between Virtual Appliance (ASAv) via SNMP; • Website certificate by Zabbix agent 2 - native monitoring of TLS/SSL website certificates by Zabbix agent 2. You can get these templates: • In Configuration → Templates

various items and hosts, SNMPv3 authentication and privacy passphrases, passwords for media types; SSL key password and HTTP proxy fields used in web scenarios and HTTP items; usernames, passwords and Setting up SSL for Zabbix frontend On RHEL/Centos, install mod_ssl package: yum install mod_ssl Create directory for SSL keys: mkdir -p /etc/httpd/ssl/private chmod 700 /etc/httpd/ssl/private Create Create SSL certificate: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/httpd/ssl/private/apache-selfsigned.key -out /etc/httpd/ssl/apache-selfsigned.crt 46 Fill out the prompts appropriately

Setting up SSL for Zabbix frontend On RHEL/Centos, install mod_ssl package: yum install mod_ssl Create directory for SSL keys: mkdir -p /etc/httpd/ssl/private chmod 700 /etc/httpd/ssl/private Create Create SSL certificate: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/httpd/ssl/private/apache-selfsigned.key -out /etc/httpd/ssl/apache-selfsigned.crt Fill out the prompts appropriately Email Address []: Edit Apache SSL configuration: /etc/httpd/conf.d/ssl.conf DocumentRoot "/usr/share/zabbix" ServerName example.com:443 SSLCertificateFile /etc/httpd/ssl/apache-selfsigned.crt SSLCertificateKeyFile

$DB[’ENCRYPTION’] = true;\\ $DB[’KEY_FILE’] = ”; $DB[’CERT_FILE’] = ”; $DB[’CA_FILE’] = ’/etc/ssl/mysql/ca.pem’; $DB[’VERIFY_HOST’] = false; $DB[’CIPHER_LIST’] = ”; ... 1. Check Database TLS encryption status_by_thread AS t2 ON t2.thread_id = t.thread_id WHERE sbt.variable_name = 'Ssl_version' and t2.variable_name = 'Ssl_cipher' ORDER BY tls_version; Required mode MySQL configuration Modern versions '', 'zbx_web'@'%' IDENTIFIED WITH mysql_native_password BY '' REQUIRE SSL PASSWORD HISTORY 5; mysql> CREATE ROLE 'zbx_srv_role', 'zbx_web_role'; mysql> GRANT SELECT, UPDATE

for SSH checks and actions SSLCertLocation 否 于客户端身份验证的 SSL 证书文件的位置。 该参数只用于 web 监 控，从 Zabbix 2.4 开 始支持该参数。 SSLCertLocation no Location of SSL client certificate files for client authentication. This supported since Zabbix 2.4. SSLKeyLocation 否 于客户端身份验证的 SSL 私钥文件的位置。 该参数只用于 web 监 控，从 Zabbix 2.4 开 始支持该参数。 SSLKeyLocation no Location of SSL private key files for client authentication. This parameter parameter is used in web monitoring only and is supported since Zabbix 2.4. 30 SSLCALocation 否 SSL 服务器证书验证覆 盖证书颁发机构 (CA) 文件的位置。如果不设 置，系统范围的目录将 被使用。 注意，这个参数的值将 被设置为 libcurl 选项 curloptcapath，在 7.42.0

for SSH checks and actions SSLCertLocation 否 于客户端身份验证的 SSL 证书文件的位置。 该参数只用于 web 监 控，从 Zabbix 2.4 开 始支持该参数。 SSLCertLocation no Location of SSL client certificate files for client authentication. This supported since Zabbix 2.4. SSLKeyLocation 否 于客户端身份验证的 SSL 私钥文件的位置。 该参数只用于 web 监 控，从 Zabbix 2.4 开 始支持该参数。 SSLKeyLocation no Location of SSL private key files for client authentication. This parameter parameter is used in web monitoring only and is supported since Zabbix 2.4. 30 SSLCALocation 否 SSL 服务器证书验证覆 盖证书颁发机构 (CA) 文件的位置。如果不设 置，系统范围的目录将 被使用。 注意，这个参数的值将 被设置为 libcurl 选项 curloptcapath，在 7.42.0

2 plugin WebCertificate is now available allowing to monitor validity and expiration dates of TLS/SSL website certificates. • Plugins MySQL and PostgreSQL now support encrypted TLS connection between traffic and DNS metrics via HTTP; • Website certificate by Zabbix agent 2 - native monitoring of TLS/SSL website certificates by Zabbix agent 2. You can get these templates: • In Configuration → Templates Setting up SSL for Zabbix frontend On RHEL/Centos, install mod_ssl package: yum install mod_ssl Create directory for SSL keys: mkdir -p /etc/httpd/ssl/private chmod 700 /etc/httpd/ssl/private Create

for SSH checks and actions SSLCertLocation 否 于客户端身份验证的 SSL 证书文件的位置。 该参数只用于 web 监 控，从 Zabbix 2.4 开 始支持该参数。 SSLCertLocation no Location of SSL client certificate files for client authentication. This supported since Zabbix 2.4. SSLKeyLocation 否 于客户端身份验证的 SSL 私钥文件的位置。 该参数只用于 web 监 控，从 Zabbix 2.4 开 始支持该参数。 SSLKeyLocation no Location of SSL private key files for client authentication. This parameter parameter is used in web monitoring only and is supported since Zabbix 2.4. 32 SSLCALocation 否 SSL 服务器证书验证覆 盖证书颁发机构 (CA) 文件的位置。如果不设 置，系统范围的目录将 被使用。 注意，这个参数的值将 被设置为 libcurl 选项 curloptcapath，在 7.42.0