Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-21 07:58:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 110

Custom OS settings: how to unsign profiles (#27100)

Browse source 
Fleet signs profiles for you

- Add redirect for the following user story
  - #26688
This commit is contained in:
Noah Talerman 2025-03-14 15:22:59 -04:00 committed by GitHub
parent 30f1c329b4
commit f4c090468c
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 3 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
articles/custom-os-settings.md
View file

@ -8,7 +8,7 @@ Currently, Fleet only supports system (device) level configuration profiles.
You can enforce OS settings using the Fleet UI, Fleet API, or [Fleet's GitOps workflow](https://github.com/fleetdm/fleet-gitops).
For macOS, iOS, and iPadOS hosts, Fleet recommends the [iMazing Profile Creator](https://imazing.com/profile-editor) tool for creating and exporting macOS configuration profiles.
For macOS, iOS, and iPadOS hosts, Fleet recommends the [iMazing Profile Creator](https://imazing.com/profile-editor) tool for creating and exporting macOS configuration profiles. Fleet signs these profiles for you. If you have self-signed profiles, run this command to unsign them: `usr/bin/security cms -D -i /path/to/profile/profile.mobileconfig | xmllint --format -`
For Windows hosts, copy this [Windows configuration profile template](https://fleetdm.com/example-windows-profile) and update the profile using any configuration service providers (CSPs) from [Microsoft's MDM protocol](https://learn.microsoft.com/en-us/windows/client-management/mdm/). Learn more about Windows CSPs [here](https://fleetdm.com/guides/creating-windows-csps).
@ -20,9 +20,7 @@ Fleet UI:
3. Select **Upload** and choose your configuration profile.
4. To modify the OS setting, first remove the old configuration profile and then add the new one.
> On macOS, iOS, and iPadOS, removing a configuration profile will remove enforcement of the OS setting.
4. To edit the OS setting, first remove the old configuration profile and then add the new one. On macOS, iOS, and iPadOS, removing a configuration profile will remove enforcement of the OS setting.
Fleet API: API documentation is [here](https://fleetdm.com/docs/rest-api/rest-api#add-custom-os-setting-configuration-profile)

1
website/config/routes.js vendored
View file

@ -877,6 +877,7 @@ module.exports.routes = {
'GET /learn-more-about/ui-gitops-mode': 'https://github.com/fleetdm/fleet-gitops/?tab=readme-ov-file#fleet-ui',
'GET /learn-more-about/certificates-query': '/tables/certificates',
'GET /learn-more-about/gitops': 'https://github.com/fleetdm/fleet-gitops/',
'GET /learn-more-about/unsigning-configuration-profiles': 'https://fleetdm.com/guides/custom-os-settings#enforce-os-settings',
// Sitemap
// =============================================================================================================