From 9ec5aae2884dd60937f91accbfd841696a9b2573 Mon Sep 17 00:00:00 2001
From: Isabell Reedy <113355639+ireedy@users.noreply.github.com>
Date: Mon, 25 Sep 2023 17:22:52 -0400
Subject: [PATCH] Docs - Add bytes option for Windows MDM config (#13933)

---
 .../fleet-server-configuration.md             | 32 +++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/docs/Configuration/fleet-server-configuration.md b/docs/Configuration/fleet-server-configuration.md
index bb5113be36..250d5c6b17 100644
--- a/docs/Configuration/fleet-server-configuration.md
+++ b/docs/Configuration/fleet-server-configuration.md
@@ -2898,6 +2898,38 @@ The duration between DEP device syncing (fetching and setting of DEP profiles).
   mdm:
     apple_dep_sync_periodicity: 10m
   ```
+##### mdm.windows_wstep_identity_cert_bytes
+> Windows MDM features are not ready for production and are currently in development. These features are disabled by default.
+
+The content of the Windows WSTEP identity certificate. An X.509 certificate, PEM-encoded.
+- Default value: ""
+- Environment variable: `FLEET_MDM_WINDOWS_WSTEP_IDENTITY_CERT_BYTES`
+- Config file format: 
+  ```
+  mdm:
+   windows_wstep_identity_cert_bytes: |
+      -----BEGIN CERTIFICATE-----
+      ... PEM-encoded content ...
+      -----END CERTIFICATE-----
+  ```
+
+
+
+##### mdm.windows_wstep_identity_key_bytes
+> Windows MDM features are not ready for production and are currently in development. These features are disabled by default.
+
+The content of the Windows WSTEP identity key. An RSA private key, PEM-encoded.
+- Default value: ""
+- Environment variable: `FLEET_MDM_WINDOWS_WSTEP_IDENTITY_KEY_BYTES` 
+- Config file format:  
+  ```
+  mdm:
+    windows_wstep_identity_key_bytes: |
+      -----BEGIN RSA PRIVATE KEY-----
+      ... PEM-encoded content ...
+      -----END RSA PRIVATE KEY-----
+  ```
+
 
 ## Managing osquery configurations