{"id":11456,"date":"2024-02-28T12:14:45","date_gmt":"2024-02-28T06:44:45","guid":{"rendered":"https:\/\/www.skynats.com\/?p=11456"},"modified":"2025-10-22T11:05:15","modified_gmt":"2025-10-22T05:35:15","slug":"psk-encryption-for-zabbix-agents","status":"publish","type":"post","link":"https:\/\/www.skynats.com\/blog\/psk-encryption-for-zabbix-agents\/","title":{"rendered":"Steps to Enable PSK Encryption For Zabbix Agents"},"content":{"rendered":"\n

Pre-Shared Key (PSK) encryption is a method of securing communication between Zabbix<\/mark><\/a> server and Zabbix agents.Enabling PSK encryption in Zabbix provides an extra level of security to your monitoring infrastructure.<\/p>\n\n\n\n

Steps to enable PSK encryption on Zabbix agent server<\/h2>\n\n\n\n

On zabbix agent server<\/strong><\/p>\n\n\n\n

1. Generate a PSK secret key in the location \/etc\/zabbix using the command<\/p>\n\n\n\n

openssl rand -hex 64 > encrypt.psk\n<\/code><\/pre>\n\n\n\n
This command generate a 64-byte random hexadecimal string and saves in a file named encrypt.psk<\/p>\n\n\n\n
2. Then configure zabbix agent configuration file zabbix_agentd.conf<\/p>\n\n\n\n
vim zabbix_agentd.conf\n\n<\/code><\/pre>\n\n\n\n
add the following lines at the bottom of the configuration file<\/p>\n\n\n\n
TLSConnect=psk\nTLSAccept=psk\nTLSPSKFile=\/etc\/zabbix\/encrypt.psk\nTLSPSKIdentity=bNb*******ouSt<\/code><\/pre>\n\n\n\n
where TLSPSK Identity is used by both the agent and server to verify that they are communicating with the correct PSK.<\/p>\n\n\n\n
save and exit the configuration file.<\/p>\n\n\n\n
3. Restart the zabbix agent<\/p>\n\n\n\n
systemctl restart zabbix-agent\n\n<\/code><\/pre>\n\n\n\n
On Zabbix Server User interface<\/strong><\/p>\n\n\n\n
4. Update the host in zabbix server user interface<\/p>\n\n\n\n
In the host’s encryption section, configure PSK encryption options as shown in the screenshot.<\/p>\n\n\n\n
\"Host<\/figure>\n\n\n\n
'Connections to host' = PSK\n'Connections from host' = PSK\n'PSK Identity' = [used in the Zabbix agent configuration file]\n'PSK' = [hexadecimal string generated from the OpenSSL command]<\/code><\/pre>\n\n\n\n
Wait for few minutes, then the verify on Zabbix Server User interface.<\/p>\n\n\n\n
\"PSK\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n
The screenshot above confirms that Zabbix Server and Agent successfully communicate via PSK encryption.<\/p>\n\n\n\n
Our\u00a0Support Team<\/a>\u00a0is available to help you with enabling encryption with zabbix agents if you encounter any issues or errors.<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Pre-Shared Key (PSK) encryption is a method of securing communication between Zabbix server and Zabbix agents.Enabling PSK encryption in Zabbix provides an extra level of security to your monitoring infrastructure. Steps to enable PSK encryption on Zabbix agent server On zabbix agent server 1. Generate a PSK secret key in the location \/etc\/zabbix using the […]<\/p>\n","protected":false},"author":14,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[777,5,391],"tags":[72,106,776],"class_list":["post-11456","post","type-post","status-publish","format-standard","hentry","category-zabbix-monitoring","category-blog","category-server-monitoring","tag-server-management","tag-server-monitoring","tag-zabbix-monitoring"],"_links":{"self":[{"href":"https:\/\/www.skynats.com\/blog\/wp-json\/wp\/v2\/posts\/11456","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skynats.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skynats.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skynats.com\/blog\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skynats.com\/blog\/wp-json\/wp\/v2\/comments?post=11456"}],"version-history":[{"count":1,"href":"https:\/\/www.skynats.com\/blog\/wp-json\/wp\/v2\/posts\/11456\/revisions"}],"predecessor-version":[{"id":16139,"href":"https:\/\/www.skynats.com\/blog\/wp-json\/wp\/v2\/posts\/11456\/revisions\/16139"}],"wp:attachment":[{"href":"https:\/\/www.skynats.com\/blog\/wp-json\/wp\/v2\/media?parent=11456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skynats.com\/blog\/wp-json\/wp\/v2\/categories?post=11456"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skynats.com\/blog\/wp-json\/wp\/v2\/tags?post=11456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}