You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: tutorials/connect-jamf-pro-to-smallstep.mdx
+13-7Lines changed: 13 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,7 +16,7 @@ You will need:
16
16
17
17
# Step-by-step instructions
18
18
19
-
### 1. Create API Client in Jamf Pro
19
+
### Create an API Client in Jamf Pro
20
20
21
21
This API client will allow Smallstep to read your Jamf device inventory and manage the webhooks necessary for ongoing inventory syncing.
22
22
@@ -39,7 +39,7 @@ This API client will allow Smallstep to read your Jamf device inventory and mana
39
39
5. Choose **Generate client secret**
40
40
6. Temporarily save the **Client ID** and **Client Secret**. You’ll use them in the next step.
41
41
42
-
### 2. Connect Jamf to Smallstep
42
+
### Connect Jamf to Smallstep
43
43
44
44
Let’s add the Jamf API credentials you just created to Smallstep.
45
45
@@ -49,7 +49,7 @@ Let’s add the Jamf API credentials you just created to Smallstep.
49
49
4. Choose **Add Platform**. Your device inventory will start syncing from Jamf to Smallstep.
50
50
5. Temporarily save the **Webhook URL**, **Username**, and **Password** presented.
51
51
52
-
### 3. Configure a SCEP Enrollment webhook in Jamf Pro
52
+
### Configure a SCEP Enrollment webhook in Jamf Pro
53
53
54
54
Smallstep uses Dynamic SCEP certificate enrollment. This webhook allows Jamf to request a dynamic, short-lived challenge string from Smallstep during a SCEP certificate request. The challenge string is injected into a [SCEP payload](https://developer.apple.com/documentation/devicemanagement/scep) for your clients to authenticate to Smallstep.
55
55
@@ -66,7 +66,7 @@ Smallstep uses Dynamic SCEP certificate enrollment. This webhook allows Jamf to
66
66
5. Webhook Event: SCEPChallenge
67
67
4. Choose **Save**
68
68
69
-
### 4. Create Agent Package for Distribution
69
+
### Create an Agent Package for Distribution
70
70
71
71
In this step, you’ll upload the Smallstep agent package to Jamf’s distribution network.
72
72
@@ -78,7 +78,7 @@ In this step, you’ll upload the Smallstep agent package to Jamf’s distributi
78
78
2. Filename: (upload from step #1)
79
79
5. Choose **Save**
80
80
81
-
### 5. Create Agent Script
81
+
### Create an Agent Bootstrap Script
82
82
83
83
This step will install a script on your client devices that bootstraps the connection between your devices and Smallstep.
84
84
@@ -97,7 +97,7 @@ This step will install a script on your client devices that bootstraps the conne
97
97
98
98
4. Choose **Save**
99
99
100
-
### 5. Create Agent Installation Policy
100
+
### Create an Agent Installation Policy
101
101
102
102
Next, we’ll configure the Script we just created to run on your client devices.
103
103
@@ -120,7 +120,7 @@ Next, we’ll configure the Script we just created to run on your client devices
120
120
4. Under Scope, select your desired policy scope. The agent will be installed on all devices in this scope.
121
121
4. Choose **Save**
122
122
123
-
### 6. Configure Agent Enrollment Profile
123
+
### Configure an Agent Enrollment Profile
124
124
125
125
In this step, we’ll tie everything together by configuring Jamf to distribute the Smallstep Agent.
126
126
@@ -192,3 +192,9 @@ In this step, we’ll tie everything together by configuring Jamf to distribute
192
192
193
193
Your Smallstep team is now linked to Jamf. The devices that you scoped will receive a certificate and have the agent installed and running.
194
194
195
+
### Confirmation
196
+
197
+
There's two ways to confirm installation on an endpoint:
198
+
- In the Smallstep UI, go to the device's profile page. In the **Device Registration** section, you'll see an **Enrolled At** timestamp.
199
+
- Alternatively, on the device itself, run `/Applications/SmallstepAgent/Contents/MacOS/SmallstepAgent version` to see that the agent is installed. And, in **System Settings**, check **Login Items** to confirm that there is a **Smallstep Agent** entry.
0 commit comments