search

fleetdm / fleet

Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
https://fleetdm.com
Other
3.01k stars 418 forks source link

Profile installation error #10244

Closed zhumo closed 1 year ago

zhumo commented 1 year ago

Fleet version: 4.27.1

Operating system: macOS 12.6.1

Web browser: Safari on macOS 12.6.1

🧑‍💻  Expected behavior

When enrolling the host manually, I should be able to enroll without issue.

💥  Actual behavior

The user (during a beta test) was able to download the mobileconfig enrollment file, open it, and then see it in the settings. However, in the settings, macOS said it was an invalid profile.

image

More info

The mobileconfig file was shared with us. Slack link to come.

QA Note

We determined it was because we are not escaping the value set in FLEET_MDM_APPLE_SCEP_CHALLENGE. If is has special characters like ' or " it will cause the enrollment profile to fail to load.

To test, set the FLEET_MDM_APPLE_SCEP_CHALLENGE to various strings with special characters of varying lengths and ensure you can properly enroll.

noahtalerman commented 1 year ago

@zhumo when you get the chance, can you please provide the link to the .mobileconfig file? Thanks!

zhumo commented 1 year ago

.mobileconfig file provided in slack thread. https://fleetdm.slack.com/archives/C03C41L5YEL/p1677775925356539

fleet-release commented 1 year ago

A cloud city soars high,
Enrolling without error,
User success in sight.