MDM docs: Explain what happens automatically (#11260)

- Add sentence to explain that Fleet installs fleetd automatically on
hosts
- Add sentence to explain that setup features require ABM
- On MDM macOS settings page, add sentence that explains that Fleet
automatically deploys a "Fleetd configuration" profile.
This commit is contained in:
Noah Talerman 2023-04-21 17:16:46 -04:00 committed by GitHub
parent b29358437b
commit d524151eec
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 9 deletions

View file

@ -1,10 +1,12 @@
# macOS settings
In Fleet you can enforce settings on your macOS hosts remotely.
In Fleet you can enforce settings on your macOS hosts remotely:
If you enforce disk encryption with Fleet, the disk encryption key (recovery key) will be stored in Fleet automatically. Learn how [here](#disk-encryption).
* Disk encryption (FileVault): If enforced, the disk encryption key (recovery key) will be stored in Fleet automatically. Learn how [here](#disk-encryption).
You can also enforce custom macOS settings. Learn how [here](#custom-settings).
* Custom settings: learn how [here](#custom-settings).
In addition to the above, Fleet automatically enforces settings for the fleetd agent using a "Fleetd configuration" configuration profile.
## Disk encryption

View file

@ -1,6 +1,8 @@
# macOS setup
In Fleet, you can customize the first-time macOS setup experience for your end users:
_Available in Fleet Premium_
In Fleet, you can customize the out-of-the-box macOS setup experience for your end users:
* Require end users to authenticate with your identity provider (IdP) and agree to an end user license agreement (EULA) before they can use their new Mac
@ -8,14 +10,16 @@ In Fleet, you can customize the first-time macOS setup experience for your end u
* Install a bootstrap package to gain full control over the setup experience by installing tools like Puppet, Munki, DEP notify, custom scrips, and more.
In addition to the customization above, Fleet automatically installs the fleetd agent during out-of-the-box macOS setup. This agent is responsible for reporting host vitals to Fleet and presenting Fleet Desktop to the end user.
MacOS setup features require connecting Fleet to Apple Business Manager (ABM). Learn how [here](./MDM-setup.md#apple-business-manager-abm).
## End user authentication
> This feature is currently in development.
## Bootstrap package
_Available in Fleet Premium_
Fleet supports installing a bootstrap package on macOS hosts that automatically enroll to Fleet.
This enables installing tools like [Puppet](https://www.puppet.com/), [Munki](https://www.munki.org/munki/), or [Chef](https://www.chef.io/products/chef-infra) for configuration management and/or running custom scrips and installing tools like [DEP notify](https://gitlab.com/Mactroll/DEPNotify) to customize the setup experience for you end users.
@ -26,9 +30,7 @@ The following are examples of what some organizations deploy using a bootstrap p
* Puppet agent to run custom scripts on your Macs
* Custom scripts and several packages bundled into one bootstrap package using a tool like [InstallApplications](https://github.com/macadmins/installapplications) to install a base set of applications, set the Mac's background, and install the latest macOS update for the end user.
> In addition to installing the bootstrap package, Fleet automatically installs the fleetd agent on hosts that automatically enroll. This agent is responsible for reporting host vitals to Fleet and presenting Fleet Desktop to the end user.
* Custom scripts and several packages bundled into one bootstrap package using a tool like [InstallApplications](https://github.com/macadmins/installapplications) to install a base set of applications, set the Mac's background, and install the latest macOS update for the end user.
To add a bootstrap package to Fleet, we will do the following steps: