fleet/server/mdm/microsoft
Victor Lyuboslavsky 7dd5924974
Added support for NDES CA for Windows hosts (#41356)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #33421 

Video: https://www.youtube.com/watch?v=-mpW8o4vqu0 
Docs: https://github.com/fleetdm/fleet/pull/41496/changes

# Checklist for submitter

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements), JS
inline code is prevented especially for url redirects

## Testing

- [x] Added/updated automated tests
- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

## Release Notes

* **New Features**
* Added support for NDES (Network Device Enrollment Service) Certificate
Authority for Windows devices, enabling secure device enrollment through
NDES proxy integration.
* New profile variables (NDESSCEPChallenge and NDESSCEPProxyURL) enable
NDES configuration in Windows profiles.
* Enhanced validation ensures proper NDES configuration requirements are
met in Windows MDM profiles.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-03-12 15:36:44 -05:00
..
admx Update WLAN XML profile verification so they aren't resent (#28296) 2025-04-18 08:45:18 -04:00
syncml Windows MDM app level impl (#38842) 2026-01-28 09:46:53 -05:00
wlanxml Update WLAN XML profile verification so they aren't resent (#28296) 2025-04-18 08:45:18 -04:00
bitlocker_csp.go Fixed issue due to UUID mistmatch on BitLocker CSP cmd. (#32210) 2025-08-22 14:32:23 -04:00
bitlocker_csp_test.go Fixed issue due to UUID mistmatch on BitLocker CSP cmd. (#32210) 2025-08-22 14:32:23 -04:00
microsoft_mdm.go Windows Manual MDM Enrollment (#36128) 2025-11-25 15:04:53 -05:00
profile_variables.go Added support for NDES CA for Windows hosts (#41356) 2026-03-12 15:36:44 -05:00
profile_variables_test.go Added support for NDES CA for Windows hosts (#41356) 2026-03-12 15:36:44 -05:00
wstep.go 39272 Check entra tenant ID (#39780) 2026-02-12 19:27:35 -05:00
wstep_csr.go remove old Windows MDM PoC tool (#39473) 2026-02-06 13:55:16 -05:00
wstep_csr_test.go Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
wstep_test.go Move nanomdm dependency in monorepo (#16015) 2024-01-11 23:28:48 -03:00