broker URL, topic, username, and password; • TLS encryption parameters: location of the top-level CA(s) certificate, MQTT certificate or certificate chain, private key. All of the new parameters are Zabbix sender are available on Zabbix Official Repository for SLES 15 and SLES 12. Note: Verify CA encryption mode doesn’t work on SLES 12 (all minor OS versions) with MySQL due to older MySQL libraries LDER%\mykey.psk"^ TLSCAFILE="c:\temp\f.txt1"^ TLSCRLFILE="c:\temp\f.txt2"^ TLSSERVERCERTISSUER="My CA"^ TLSSERVERCERTSUBJECT="My Cert"^ TLSCERTFILE="c:\temp\f.txt5"^ TLSKEYFILE="c:\temp\f.txt6"^ ENABLEPATH=1^

LDER%\mykey.psk"^ TLSCAFILE="c:\temp\f.txt1"^ TLSCRLFILE="c:\temp\f.txt2"^ TLSSERVERCERTISSUER="My CA"^ TLSSERVERCERTSUBJECT="My Cert"^ TLSCERTFILE="c:\temp\f.txt5"^ TLSKEYFILE="c:\temp\f.txt6"^ ENABLEPATH=1^ SSLKeyLocation parameter in zabbix_server.conf /var/lib/zabbix/ssl/ssl_ca The volume is used as location of certificate authority (CA) files for SSL server certificate verification. It is the SSLCALocation SSLKeyLocation parameter in zabbix_proxy.conf /var/lib/zabbix/ssl/ssl_ca The volume is used as location of certificate authority (CA) files for SSL server certificate verification. It is the SSLCALocation

libssh2 packages as well. These packages are located in the non-supported directory. Note: Verify CA encryption mode doesn’t work on RHEL 7 with MySQL due to older MySQL libraries. Notes on installation Zabbix sender are available on Zabbix Official Repository for SLES 15 and SLES 12. Note: Verify CA encryption mode doesn’t work on SLES 12 (all minor OS versions) with MySQL due to older MySQL libraries LDER%\mykey.psk"^ TLSCAFILE="c:\temp\f.txt1"^ TLSCRLFILE="c:\temp\f.txt2"^ TLSSERVERCERTISSUER="My CA"^ TLSSERVERCERTSUBJECT="My Cert"^ TLSCERTFILE="c:\temp\f.txt5"^ TLSKEYFILE="c:\temp\f.txt6"^ ENABLEPATH=1^

available with either MySQL/PostgreSQL database and Apache/Nginx webserver support. Note: Verify CA encryption mode doesn’t work on RHEL 7 with MySQL due to older MySQL libraries. Zabbix agent packages SUSE Linux Enterprise Server 15 Download SUSE Linux Enterprise Server 12 Download 66 Note: Verify CA encryption mode doesn’t work on SLES 12 (all minor OS versions) with MySQL due to older MySQL libraries LDER%\mykey.psk"^ TLSCAFILE="c:\temp\f.txt1"^ TLSCRLFILE="c:\temp\f.txt2"^ TLSSERVERCERTISSUER="My CA"^ TLSSERVERCERTSUBJECT="My Cert"^ TLSCERTFILE="c:\temp\f.txt5"^ TLSKEYFILE="c:\temp\f.txt6"^ ENABLEPATH=1^

Zabbix sender are available on Zabbix Official Repository for SLES 15 and SLES 12. Note: Verify CA encryption mode doesn’t work on SLES 12 (all minor OS versions) with MySQL due to older MySQL libraries LDER%\mykey.psk"^ TLSCAFILE="c:\temp\f.txt1"^ TLSCRLFILE="c:\temp\f.txt2"^ TLSSERVERCERTISSUER="My CA"^ TLSSERVERCERTSUBJECT="My Cert"^ TLSCERTFILE="c:\temp\f.txt5"^ TLSKEYFILE="c:\temp\f.txt6"^ ENABLEPATH=1^ SSLKeyLocation parameter in zabbix_server.conf /var/lib/zabbix/ssl/ssl_ca The volume is used as location of certificate authority (CA) files for SSL server certificate verification. It is the SSLCALocation

SSLCALocation no 为 SSL 服 务 器 证 书 验 证 覆 盖 证 书 颁 发 机 构 (CA) 文 件 的 位 置。 如 果 不 设 置， 系 统 范 围 的 目 录 将 被 使 用。 注 意， 这 个 参 数 的 值 将 被 设 置 为 libcurl 选 项 cur- lopt- ca- p- ath， 在 7.42.0 之 前 的 libcurl 版 本 中， 只 有 使 255。 35 参数必 范围 默认值 描述 StartEscalators no 1-100 1 Number of pre- forked in- stances of es- ca- la- tors. Zabbix 3.0.0 后 支 持 该 参 数。 StartHTTPPollers no 0-1000 1 HTTP 轮 询 器 子 进 程 实 例 个 数。 1 SNMP 设 备 或 外 部 检 查 的 超 时 时 长 (单 位 秒)。 43 参数必 范围 默认值 描述 TLSCAFile no 包 含 用 于 对 等 证 书 验 证 的 顶 级 CA 证 书 的 文 件 的 完 整 路 径 名， 用 于 加 密 Zab- bix 各 组 件 间 的 通 信。 Zabbix 3.0.0 后 支 持 该 参 数。 44 参数必 范围 默认值

SSLKeyLocation parameter in zabbix_server.conf /var/lib/zabbix/ssl/ssl_ca The volume is used as location of certificate authority (CA) files for SSL server certificate verification. It is the SSLCALocation SSLKeyLocation parameter in zabbix_proxy.conf /var/lib/zabbix/ssl/ssl_ca The volume is used as location of certificate authority (CA) files for SSL server certificate verification. It is the SSLCALocation Certificate is first validated with CA (certificate authority). If it is valid, signed by the CA, then the Issuer field can be used to further restrict allowed CA. This field is intended to be used

broker URL, topic, username, and password; • TLS encryption parameters: location of the top-level CA(s) certificate, MQTT certificate or certificate chain, private key. All of the new parameters are 12 (SP4 and newer). Please note that on SLES 12 the following features are not available: • Verify CA encryption mode with MySQL does not work due to older MySQL libraries. • Since Zabbix 6.4, SSH checks What incoming connections to accept. TLSCAFILE The full pathname of a file containing the top-level CA(s) certificates for peer certificate verification, used for encrypted communications between Zabbix

pre-shared key; cert - connect using TLS and a certificate; --tls-ca-file <CA file> Full pathname of a file containing the top-level CA(s) certificates for peer certificate verification. --tls-crl-file pre-release versions. Please note that on SLES 12 the following features are not available: • Verify CA encryption mode with MySQL does not work due to older MySQL libraries. • SSH checks are not supported What incoming connections to accept. TLSCAFILE The full pathname of a file containing the top-level CA(s) certificates for peer certificate verification, used for encrypted communications between Zabbix

frontend to database: • required - connect using TLS as transport mode without identity checks; • verify_ca - connect using TLS and verify certificate; 17 • verify_full - connect using TLS, verify certificate both checkboxes are marked): Parameter Description Database TLS CA file Specify the full path to a valid TLS certificate authority (CA) file. Database TLS key file Specify the full path to a valid TLS supported. Use cases Zabbix frontend uses GUI interface to define possible options: required, verify_ca, verify_full. Specify required options in the installation wizard step Configure DB connections. These