Server crashed, new server installed but how to connect old agents?

[bierbuik]

We've had a hypervisor crash where we could not recover any data from our virtal machines. (also no backup.. stupid I know..)
The Meshcentral server is installed again, and new devices (with the new exe) are added to the new groups.

Is there any way to add the old agents without going on site?
Devices are pointing to the same FQDN (same as before)
I'm seeing the old agents want to connect:
"
22:24:19 - AGENT: Verified agent connection to Fg7fViD@CWllY@niD2@D9qNAF2Lgdooc89Np***3UBnHsKOKmr$QnLb (:48656).
22:24:19 - AGENT: New agent at ******:48656
"

But it is not creating any groups or devices.

This is already in the config added:
"IgnoreAgentHashCheck": true,
"orphanAgentUser": "username",

But no results yet.

Any suggestions? We had agents troughout the whole country,
I don't want to drive a few weeks to everywhere to add them again.

[si458]

have you set the config.json up correctly? orphanAgentUser inside the domains section and the username is a siteadmin user?
edit: can you share it? (https://sanitizer.meshcentraltools.com/ <- sanitize it)

[bierbuik]

New json, but still no old agents.
Any other suggestions?

{
  "$schema": "https://raw.githubusercontent.com/Ylianst/MeshCentral/master/meshcentral-config-schema.json",
  "settings": {
    "cert": "remote.domain-1.com",
    "postgres": {
      "host": "10.10.1.171",
      "user": "REDACTED",
      "port": 5432,
      "password": "REDACTED",
      "database": "meshcentral"
    },
    "WANonly": true,
    "sessionKey": "REDACTED",
    "port": 443,
    "ignoreAgentHashCheck": true,
    "webRTC": true,
    "nice404": true,
    "selfUpdate": false,
    "tlsOffload": true,
    "trustedProxy": "10.10.1.171,172.19.0.1,Nginx Proxy Manager"
  },
  "domains": {
    "": {
      "title": "REDACTED",
      "orphanAgentUser": "user-1",
      "newAccounts": false,
      "welcomeText": "REDACTED",
      "welcomePicture": "REDACTED",
      "welcomePictureFullScreen": true,
      "footer": "REDACTED",
      "loginfooter": "REDACTED",
      "certUrl": "https://remote.domain-1.com:443",
      "localSessionRecording": false
    }
  }
}

[si458]

all looks ok, but i have just remembered, from what Ylian told me the other week,
if you have lost the agentcert files that was inside the meshcentral-data folder, then the would be no way to recover access
because the server does checks with this certificate as its embedded in the meshagents
so the chances are i dont think the might be away to recover access sadly :(

edit: do you see the warning in the my server tab saying 'Agent hash checking is being skipped, this is unsafe.' ?

edit2: have you simply tried restarting a meshagent that u have access to and seeing if it appears?
it might be you just need to kick restart the services/computers

[bierbuik]

Yes last one I see ('Agent hash checking is being skipped, this is unsafe).

We still got the .exe files for the agents (old version)

edit: I see there a file in named CERTIFICATE
But cannot do anything with it.

[si458]

sadly the is no way to extract the cert from the exe because its just the public key, you still need the private key,
this is why we tell people to always keep a copy of the meshcentral-data folder
meshcentral also even does daily (24hours) backups to a zip too, do u not have any of those at all?

[bierbuik]

Sadly not, we've had a major outage from our SAN wich corrupted all the VM disks that were running at that time.

Then there is no other way to add the old agents. Thank you very much for your time and effort!

[si458]

If u have some free time tomorrow (12hours time) u can give me a fleemail/disc/whats/tele/sign/pigeon message and we can have a look together?
As the verified connection is the last message before authorised=1 is set so the devices should just appear, so it must be something else that's missing?

[bierbuik]

Sure if you want, I'll make some time free.
I'll send you an e-mail tomorrow morning if that is ok.

Thank you.

[si458]

@bierbuik sure no worries!
Im UK time to give u an idea (gmt/utc+0)