Monitoring with Check_MK and MFA enabled

[miklashenne]

Dear community!

I have a question about monitoring. For years, we have been monitoring our Veeam backup servers version 13 with VeeamONE and Check_MK. With Check_MK, we have the advantage that tickets are automatically generated if a job ends with the status “FAILED.”
Now we have the problem that, thanks to MFA, we can no longer perform queries with the Check_MK plugin for VEEAM and therefore no longer receive data for Check_MK.

My question and challenge is: Does anyone here already have a solution that allows us to monitor the VBR server with Check_MK while MFA is enabled?

Thank you!

Regards,
Miklas

[Mildur]

Hi Miklas,

I’m not familiar with how Check_MK integrates with Veeam products, but I assume it uses PowerShell — is that correct?

The account used for our PowerShell module cannot have MFA enabled. MFA also doesn’t work for workflows that require regular automated queries. Otherwise, you would need to provide an MFA token every time Check_MK runs a PowerShell cmdlet to collect data from a Veeam product.

Please use a "service account" for Check_MK and exclude it from MFA as described here: Disabling MFA for Service Accounts.

Best,
Fabian