Agent Authentication Key

[Thaynara Soares]

In the nano file /var/ossec/etc/client. Some numbers appear in the agent's Authentication Key, others appear, do they need to have the same numbers?

[Pedro Nicolás Gomez]

Hi  Thaynara Soares,

The client.keys file stores the data used to authenticate secure agents. This file contains one line per each agent entry. In the case of agents, only one line is allowed, and this line must match exactly one entry in the client.keys file at manager, otherwise the agent will be rejected.

Format: 
<ID> <Name> <Address> <Password>

Examples:

001 server1 any bb8a28997c6c3964eacb3d32308072f6661f567a41105b2b0b09f1a82331b937 

002 dbserver 10.0.1.2 363a99a6e9c9a8b6bb766d676453538e0cb20162f84b36472d99cfbef4928440

https://documentation.wazuh.com/current/development/client-keys.html

For the agent to communicate with the manager the agent's client.keys must match the corresponding entry in the manager's client.keys.

I hope it helps.
Best regards,
Pedro Nicolas

[Thaynara Soares]

For example, the Authentication key has numbers and letters, but in my file it is different. Do they have to be different or the same numbers?

[Pedro Nicolás Gomez]

Yes, they must be different. When stored in the client.keys file it is stored in “raw format”, while the one displayed in the UI is a hash of the stored key.

[Thaynara Soares]

I understand, thank you very much for the information