empayre/fleet
14
0
Fork 0
mirror of https://github.com/empayre/fleet.git synced 2024-11-06 00:45:19 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Docs and articles: Remove Windows MDM feature flag (#16399)

Browse Source 
- Remove feature flag from the docs and articles (it no longer exists)
- Remove mention of Windows MDM not being ready for production
This commit is contained in:
Noah Talerman 2024-02-05 09:11:45 -05:00 committed by GitHub
parent efe68e2c66
commit 9069850585
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
5 changed files with 6 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
articles/windows-mdm-setup.md
View File

@ -4,8 +4,6 @@
## Overview
> Windows MDM features are not ready for production and are currently in development. These features are disabled by default.
Turning on Windows MDM features requires configuring Fleet with a certificate and key. This guide will walk you through how to upload these to Fleet and turn on Windows MDM.
Automatic enrollment allows Windows workstations to automatically enroll to Fleet when they are first set up. Automatic enrollment requires Microsoft Azure Active Directory (aka Microsoft Entra). This guide will walk you through how to connect Azure AD to Fleet.
@ -40,16 +38,14 @@ Save the SCEP certificate and SCEP key. These are your certificate and key. You
### Step 2: configure Fleet with your certificate and key
1. In your Fleet server configuration, set the contents of the certificate and key in the following environment variables:
In your Fleet server configuration, set the contents of the certificate and key in the following environment variables:
> Note: Any environment variable that ends in `_BYTES` expects the file's actual content to be passed in, not a path to the file. If you want to pass in a file path, remove the `_BYTES` suffix from the environment variable.
- [FLEET_MDM_WINDOWS_WSTEP_IDENTITY_CERT_BYTES](https://fleetdm.com/docs/deploying/configuration#mdm-windows-wstep-identity-cert-bytes)
- [FLEET_MDM_WINDOWS_WSTEP_IDENTITY_KEY_BYTES](https://fleetdm.com/docs/deploying/configuration#mdm-windows-wstep-identity-key-bytes)
2. Set the `FLEET_DEV_MDM_ENABLED` environment variable to `1`.
3. Restart the Fleet server.
Restart the Fleet server.
### Step 3: Turn on Windows MDM in Fleet

2
docs/Configuration/configuration-files/README.md
View File

@ -1118,8 +1118,6 @@ Set name of default team to use with Apple Business Manager.
##### mdm.windows_enabled_and_configured
> Windows MDM features are not ready for production and are currently in development. These features are disabled by default.
Enables or disables Windows MDM support.
- Default value: false

2
docs/Configuration/fleet-server-configuration.md
View File

@ -2873,7 +2873,6 @@ The duration between DEP device syncing (fetching and setting of DEP profiles).
apple_dep_sync_periodicity: 10m
```
##### mdm.windows_wstep_identity_cert_bytes
> Windows MDM features are not ready for production and are currently in development. These features are disabled by default.
The content of the Windows WSTEP identity certificate. An X.509 certificate, PEM-encoded.
- Default value: ""
@ -2890,7 +2889,6 @@ The content of the Windows WSTEP identity certificate. An X.509 certificate, PEM
If your WSTEP certificate/key pair was compromised and you change the pair, the disk encryption keys will no longer be viewable on all macOS hosts' **Host details** page until you turn disk encryption off and back on.
##### mdm.windows_wstep_identity_key_bytes
> Windows MDM features are not ready for production and are currently in development. These features are disabled by default.
The content of the Windows WSTEP identity key. An RSA private key, PEM-encoded.
- Default value: ""

4
docs/Using Fleet/Audit-logs.md
View File

@ -853,13 +853,13 @@ This activity contains the following fields:
## enabled_windows_mdm
Windows MDM features are not ready for production and are currently in development. These features are disabled by default. Generated when a user turns on MDM features for all Windows hosts (servers excluded).
Generated when a user turns on MDM features for all Windows hosts (servers excluded).
This activity does not contain any detail fields.
## disabled_windows_mdm
Windows MDM features are not ready for production and are currently in development. These features are disabled by default. Generated when a user turns off MDM features for all Windows hosts.
Generated when a user turns off MDM features for all Windows hosts.
This activity does not contain any detail fields.

4
server/fleet/activities.go
View File

@ -1072,7 +1072,7 @@ func (a ActivityTypeEnabledWindowsMDM) ActivityName() string {
}
func (a ActivityTypeEnabledWindowsMDM) Documentation() (activity, details, detailsExample string) {
return `Windows MDM features are not ready for production and are currently in development. These features are disabled by default. Generated when a user turns on MDM features for all Windows hosts (servers excluded).`,
return `Generated when a user turns on MDM features for all Windows hosts (servers excluded).`,
`This activity does not contain any detail fields.`, ``
}
@ -1083,7 +1083,7 @@ func (a ActivityTypeDisabledWindowsMDM) ActivityName() string {
}
func (a ActivityTypeDisabledWindowsMDM) Documentation() (activity, details, detailsExample string) {
return `Windows MDM features are not ready for production and are currently in development. These features are disabled by default. Generated when a user turns off MDM features for all Windows hosts.`,
return `Generated when a user turns off MDM features for all Windows hosts.`,
`This activity does not contain any detail fields.`, ``
}