-
Notifications
You must be signed in to change notification settings - Fork 44
[CON-287] Reorg agent manual install docs into a single page #457
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
| 1. Stop and remove the launch agent: | ||
| ```bash | ||
| launchctl stop com.smallstep.launchd.Agent | ||
| launchctl remove com.smallstep.launchd.Agent | ||
| ``` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I believe svc uninstall should handle this, cc @darkfronza
platform/smallstep-agent.mdx
Outdated
| 3. Configure the agent using PowerShell (run as Administrator): | ||
| ```powershell | ||
| New-Item -Path "HKLM:\Software\Policies\Smallstep" | ||
| Set-ItemProperty -Path "HKLM:\Software\Policies\Smallstep" -Name "TeamSlug" -Value "<team-id>" | ||
| Set-ItemProperty -Path "HKLM:\Software\Policies\Smallstep" -Name "Certificate" -Value "capi:store-location=machine;store=My;issuer=Smallstep (<team-id>) Agents Intermediate CA;cn=step-agent-bootstrap" | ||
| ``` | ||
| Replace `<team-id>` with your Team ID from the Smallstep UI (found in [Settings → Team](https://smallstep.com/app/?next=/settings/team)). | ||
| If your team was created before October 2024, your issuer CA may have a common name without the team slug ("Smallstep Agents Intermediate CA"). Check your [Authority list](https://smallstep.com/app/?next=/cm/authorities) to confirm. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This isn't going to be applicable for cases where an MDM is not being used to issue a provisional enrollment certificate. Instead, this should likely focus on self-enrollment and API-based enrollment. See: https://www.notion.so/smallstep/API-based-Enrollment-Windows-and-Linux-25cd17a9124980bfa220eeec08ebb80b
joshdrake
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Left several comments for material changes.
No description provided.