Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-24 01:18:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 84

Update user-scoped certificates section (#37693)

Browse source 
Clarify instructions for macOS vs Windows regarding certificate payload
scoping and profile upload.
This commit is contained in:
Marko Lisica 2026-01-03 20:55:51 +01:00 committed by GitHub
parent 8579603c2a
commit 8827ae45ab
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 3 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
articles/connect-end-user-to-wifi-with-certificate.md
View file

@ -756,16 +756,9 @@ If an end user is on vacation (offline for more than 30 days), their certificate
You can deploy a user scoped certificate on macOS and Windows hosts using a user scoped configuration profile.
1. **Add your CA as before**
Use the above steps to integrate your CA with Fleet.
1. **Create a certificate payload**
Use your preferred tool (e.g., Apple Configurator or a `.mobileconfig` generator) to create a configuration profile that includes your certificate. For Windows, use the [example profile](#example-configuration-profiles) and replace `./Device` with `./User` in all `<LocURI>` elements.
2. **Ensure the payload is scoped to the user**
In the payload, set the `PayloadScope` to `User`. This tells macOS to install the certificate in the user’s login keychain instead of the system keychain.
3. **Upload the configuration profile to Fleet**
Navigate to **Controls > OS settings > Custom settings** in the Fleet UI. Upload the `.mobileconfig` profile you created.
4. **Assign the profile to the correct hosts**
Use Fleet’s targeting filters to assign the profile to the appropriate hosts. The certificate will be installed in the login keychain of the user currently logged in on each device.
1. Follow the instructions above to connect Fleet to your certificate authority (CA).
2. Create a certificate [configuration profile](#example-configuration-profiles). For Windows, replace `./Device` with `./User` in all `<LocURI>` elements. For macOS, set `PayloadScope` to `User`.
3. In Fleet, navigate to **Controls > OS settings > Custom settings** and upload the configuration profile you created.
### Editing ceritificate configuration profiles on Apple (macOS, iOS, iPadOS) hosts