Repository navigation
Conversation
- Windows SCEP item: add Key size 2048 (Iru's 1024 default fails at the CA), leave Valid period unset (the Agents authority sets the lifetime) - Match Iru field labels and section layout in both SCEP sections - Set Install on for both SCEP items - Update API token permissions flow, auto-approval, Settings tab and SCEP URL format - Windows Custom App/Script item types, run-once script behavior - Add Windows enrollment via the Enrollment Portal - Use sc.exe instead of sc (Set-Content alias in PowerShell) - Note that deleting the items leaves the agent installed on Windows Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
| - Copy the **SCEP URL** (for example, `https://agents.example.ca.smallstep.com/scep/integration-iru-abc123`) | ||
| 2. Click on your Iru connection, and select the **Settings** tab | ||
| 3. From this tab, you can: | ||
| - Copy the **SCEP URL** (for example, `https://your-team.scep.smallstep.com/p/agents/integration-iru-abc123`) |
There was a problem hiding this comment.
I'm OK with this change, but it assumes one is OK with trusting Web PKI.
There was a problem hiding this comment.
I'm OK with this change, but it assumes one is OK with trusting Web PKI.
I changed this to match what my connection's Settings tab shows now (https://.scep.smallstep.com/p/agents/integration-iru-), so the example matches what people copy. Good point on Web PKI. Happy to switch it back to the *.ca.smallstep.com form if that's the endpoint you'd rather customers use. In that case the console probably should show it too.
There was a problem hiding this comment.
If that's what's shown (now), let's keep it like this.
I'm not sure if we ever documented this URL pattern somewhere, and what it implies w.r.t. Web PKI. If anything, it's outside the scope of this PR.
There was a problem hiding this comment.
Sorry to merge this one prematurely. I've been adding commits to Herman's PR
Suggested changes to #570 from testing the Windows steps. This PR targets
herman/iru-windows, so merging it updates #570.2048(Iru defaults to 1024), and Valid period left unsetx64/ARM64, Custom Scripts run once per devicesc.exe query, becausescis theSet-Contentalias in PowerShell🤖 Generated with Claude Code