fleet/orbit/pkg/packaging
Victor Lyuboslavsky ab4c505f4b
Enroll secret in macOS keychain and Windows Credential Manager (#16068)
#13832

For macOS hosts, fleetd now stores and retrieves enroll secret from
macOS keychain.
- this feature must use the official signed and notarized version of
fleetd
- for contributors, this feature can disabled with either:
  - fleetctl package flag: --disable-keystore
  - fleetd runtime flag: --disable-keystore

This feature does not cover the MDM usecase where enroll secret is
stored in the MDM profile. This usecase will hopefully be worked on next
sprint with the MDM team.

For Windows hosts, fleetd now stores and retrieves enroll secret from
Windows Credential Manager.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` or
`orbit/changes/`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
  - For Orbit and Fleet Desktop changes:
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
2024-01-16 06:51:37 -06:00
..
wix chore: remove refs to deprecated io/ioutil (#14485) 2023-10-27 15:28:54 -03:00
certs.pem Update Orbit CA certs [automated] (#13446) 2023-08-22 06:01:58 -03:00
deb.go update documentation of orbit/pkg/packaging (#6819) 2022-07-25 20:14:20 -03:00
linux_shared.go Allow enrolling fleetd using osquery's instance identifier (#15570) 2023-12-15 15:26:32 -03:00
macos.go chore: remove refs to deprecated io/ioutil (#14485) 2023-10-27 15:28:54 -03:00
macos_notarize.go Update to latest gon with notarytool until we find a better solution (#14918) 2023-11-03 18:56:30 -05:00
macos_rcodesign.go device_token endpoint improvements (#15849) 2023-12-28 14:20:36 -06:00
macos_templates.go Enroll secret in macOS keychain and Windows Credential Manager (#16068) 2024-01-16 06:51:37 -06:00
mk-ca-bundle.pl Update mk-ca-bundle.pl tool in repository (#8184) 2022-10-12 12:01:18 -03:00
packaging.go Enroll secret in macOS keychain and Windows Credential Manager (#16068) 2024-01-16 06:51:37 -06:00
rpm.go update documentation of orbit/pkg/packaging (#6819) 2022-07-25 20:14:20 -03:00
windows.go chore: remove refs to deprecated io/ioutil (#14485) 2023-10-27 15:28:54 -03:00
windows_templates.go Custom email device-mapping: implement the CLI (fleetd + fleetctl) changes (#15763) 2023-12-21 11:22:59 -06:00
windows_test.go Feature 8058: Added resource.syso metadata file (#10783) 2023-05-17 18:53:25 -03:00