Rating

This plugin checks the expiration date of NoSpamProxy certificates used for M365 client identification (used for company servers)

You can define levels for warning and critical state. If the expiration date of a certificate is fewer days far as defined in these levels then the service will switch to WARN or CRIT state.

You must configure a Windows user for script execution in C:\ProgramData\checkmk\agent\check_mk.user.yml:

• pattern : '$CUSTOM_PLUGINS_PATH$\spit_nsp_certificates.ps1' user : ' ' run : yes async : yes cache_age : 3600

The Windows user must have appropriate rights to use the PowerShell cmdlet of Get-NspCertificate. So add the Windows user to the user group "NoSpamProxy People and Identities Administrators"! It should also be sufficient to run the script every hour (3600 seconds)!

inventory: Automatic inventory is supported. Install the agent and one service called "NSP certificates" will be created.