Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 18 Packages Projects Releases Wiki Activity

Update SCEP certificate renewal information (#46957)

Browse Source 
Shipped in:
- https://github.com/fleetdm/fleet/issues/40639
This commit is contained in:
Noah Talerman
2026-06-05 17:04:16 -05:00
committed by GitHub
parent 792705bb68
commit b693fc21b2
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
articles/okta-conditional-access-integration.md
+1 -1
View File
@@ -75,7 +75,7 @@ Replace:
3. Copy the profile to a new `.mobileconfig` file and save.
4. Follow the instructions in the [custom OS settings](https://fleetdm.com/guides/custom-os-settings) guide to deploy the profile to the hosts where you want conditional access to apply.
Deploying this profile will deploy a SCEP certificate to your hosts. These certificates are valid for 1 year and 33 days. Automatic renewal for this certificate is [coming soon](https://github.com/fleetdm/fleet/issues/40639). When the certificate is renewed, the old certificate isn't removed. To clean up the old certificate, you can run [this script](https://github.com/fleetdm/fleet/blob/31ec68e325801bfd2199191f70d021383a45161f/assets/scripts/delete-duplicate-scep-certificates.sh).
Deploying this profile will deploy a SCEP certificate to your hosts. These certificates are valid for 1 year and 33 days. When the certificate is renewed, the old certificate isn't removed. To clean up the old certificate, you can run [this script](https://github.com/fleetdm/fleet/blob/31ec68e325801bfd2199191f70d021383a45161f/assets/scripts/delete-duplicate-scep-certificates.sh).
> If using GitOps, use the challenge in a [secret variable](https://fleetdm.com/guides/secrets-in-scripts-and-configuration-profiles), instead of hardcoding into the profile.