Connect Fleet DM to Smallstep

Smallstep can integrate with Fleet DM to deploy certificates to your Fleet-managed devices.

You will need:

• A Smallstep team
• A Fleet DM instance

To sync your devices from Fleet DM, create an API-only user in Fleet DM, and then put the token into the Fleet settings in Smallstep.

To configure Fleet to use Dynamic SCEP for certificate issuance to your endpoints, follow the instructions in Connect end user to WiFi with certificate (Smallstep)

Though not required, we suggest deploying the Smallstep agent to your endpoints. The agent makes it easier to configure endpoints and manage certificates. You can deploy the agent using Fleet's software management and scripting features.

Alternatively, you can use a separate software management system such as Munki to deploy the agent. See install via a software management tool for details.