Try Fleet: setup Windows MDM

[forderud]

• @noahtalerman: User requested this because they were trying Fleet (fleetdm.com/try-fleet) and they wanted to setup Windows MDM. Setting up Windows MDM requires updating Fleet's server config. The current documentation does not clearly specify the typical file path for the Fleet server configuration on Windows, nor does it explain how to pass environment variables to fleetctl preview for Windows MDM setup.

  • @noahtalerman: In the interim the user might be able to update %USERPROFILE%\.fleet\config and restart the Docker "preview" container.
    • @forderud hasn't found a way to make this work. See comment here.
  • @noahtalerman: Eventually Fleet could update fleetdm.com/try-fleet page and/or the Fleet server configuration documentation to tell the user how to try Windows MDM when using fleetctl preview.

---

[noahtalerman]

Goal

User story
As a individual interested in evaluating local Fleet deployment,
I want to be able to update the fleet server configuration file
so that I can set the mdm.windows​_wstep​_identity​_cert​_bytes and mdm.windows​_wstep​_identity​_key​_bytes to activate Windows MDM.

How?

Following the instructions on https://fleetdm.com/try-fleet instructions for local deployment on Windows.

I've afterwards tried updating %USERPROFILE%\.fleet\config and restarted the Docker "preview" container from the Docker UI. However, the certificate settings doesn't seem to be picked up. I therefore suspect that I'm either updating the wrong file or am missing a configuration step to propagate the settings to the "preview" container.

Requests:

• Would it be possible to update https://fleetdm.com/docs/configuration/fleet-server-configuration to also cover the typical fleet configuration file path. Is it for instance %USERPROFILE%\.fleet\config on Windows?
• Would it be possible to document how to pass environment variables to the Fleet server, as described in https://fleetdm.com/guides/windows-mdm-setup ? Can this for instance be achieved through fleetctl, docker or some other tool?

Context