Hardware-backed device identity for Fleet
Fleet offers flexible, transparent, real-time device visibility, compliance, and orchestration, and Smallstep elevates that foundation with stronger, hardware-backed security.
Easy device revocation 
Automated cert lifecycle 
Eliminate credential theft 
Enhanced Visibility & Compliance
Cross-OS Device Attestation
Open & Extensible Architecture
Even the best MDMs alone aren't enough
When Smallstep is added to Fleet, a device's hardware identity becomes an authentication factor. Instead of relying solely on shared secrets and user credentials, Smallstep silently verifies device trust —blocking unauthorized machines without adding friction for users.
Together Smallstep and Fleet can:
- Support hardware device attestation
- Support ACME device attestation
- Support conditional access
- Support device inventory
- Check if a device is real or a cloned VM
Fleet seamlessly integrates with Smallstep
Zero-touch device configuration
Smallstep automatically pushes secure configuration profiles and credentials for Wi-Fi, VPN, and SaaS apps to all verified devices. Your IT team enjoys streamlined, error-free enrollments, freeing them from tedious manual processes while ensuring robust, reliable security across your entire device fleet.
Hands-free certificate management
Say goodbye to manual certificate renewals and revocation headaches. Smallstep proactively monitors certificate lifecycles—automatically renewing credentials before expiration and immediately revoking access for offboarded or compromised devices. Reduce administrative overhead, eliminate manual errors, and keep device security always up-to-date.
Get the data sheet
When Smallstep is added to Fleet, a device's hardware identity becomes an authentication factor. Instead of relying solely on shared secrets and user credentials, Smallstep silently verifies device trust, blocking unauthorized machines without adding friction for users.
Strengthen your Fleet inventory
Passwords and posture checks alone can’t guarantee that devices in your Fleet device inventory are trusted. Hardware-backed keys and attestation dramatically raise the bar against attackers. Learn how hardware-backed device identity can add cryptographic device proof to your MDM posture.