Closed zhumo closed 4 months ago
unfortunately is the name we currently put in the SCEP cert, we can absolutely change that for new certs we generate tho.
@roperzh got it! I tracked this as a feature request here: https://github.com/fleetdm/fleet/issues/18427
Hey @dherder, @pintomi1989, @Patagonia121 heads up, this prospect/customer request was shipped in 4.49 ✨
Note that existing profiles won't be retroactively signed (they must be re-installed).
C&C: need to check for out-of-date documentation (@marko-lisica can you help with this when you're back?)
Closing this issue.
Did a search through Custom OS settings doc page and we don't mention signing at all.
This is ok because we think IT admins expect profiles to be signed by default.
Profiles signed, secure, Trust in systems restored, pure. Fleet aids, reassures.
Existing profiles won't be retroactively signed (they must be re-installed).
Goal
Context
Changes
Product
mdm.apple_scep_cert
as a trusted certificate root to the host's keychainEngineering
QA
Risk assessment
Manual testing steps
Testing notes
Confirmation