Internal documentation only

This page has been marked as draft.

Fixing 'CHECK_NRPE: Error - Failed to load client private key file' Collector monitoring errors

Symptoms Copied

After upgrading to 6.8.1, 6.8.2 or 6.8.3, some Collector Servicechecks start to randomly return the error:

CHECK_NRPE: Error - Failed to load client private key file

Cause Copied

In Opsview versions 6.8.1, 6.8.2 and 6.8.3, self-monitoring has been swapped from the older and less secure NRPE based Opsview Agent to the more secure and performant Infrastructure Agent. The new agent configuration relies on TLS certificates to validate and verify the connection to the agent for added security.

The error is produced when the Collector Cluster is set to monitor itself (rather than be monitored by the Orchestrator) and some Collector nodes within the Cluster do not have all the required certificates installed.

This internal bug reference is: OP-59428

Solution Copied

After installing or updating the Opsview Support Scripts on your Orchestrator, as ‘root’ run the script

/opt/opsview/supportscripts/bin/fix_682_collector_keys

This will copy all relevant Cluster TLS certificates to each Collector node. As soon as the script has completed the errors should resolve (there is no need to run an ‘Apply Changes’).