NRPE : SSL with NSClient++

[kopi Lim]

Hi all, I am using Centos v6 (as a monitor host) to monitor 100+ of Windows (as a remote host, or so called being monitored), in order to secure the communication between all the machine, is it a **MUST** to generate the cert and key one by one and implement them to each machine **OR** just generate a cert and a key that implement to all the windows machine.

PS: I followed the guide to generate the CA, cert, key from https://www.altaro.com/hyper-v/securely ... -nsclient/

[mbellerue]

I believe you can just generate one key and push it out to each client. Though the communication is not normally plain text, it is encrypted with a 512bit DH key.

Edit: Here are some additional docs on the subject that may help you with encryption.
https://github.com/NagiosEnterprises/nr ... DME.SSL.md
https://support.nagios.com/kb/article.php?id=519