Skip to content

Update Intune docs for MSI installer #418

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from
Draft
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 3 additions & 35 deletions tutorials/connect-intune-to-smallstep.mdx
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
---
updated_at: May 13, 2025
updated_at: June 18, 2025
title: Connect Intune to Smallstep
html_title: Connect Intune to Smallstep
description: Configure Intune to deploy the Smallstep Agent and distribute certificates and configuration to Mac clients.
Expand Down Expand Up @@ -98,43 +98,11 @@ In this step, we’ll add the Smallstep Agent to Intune for distribution to devi

1. In Intune,
1. Start at [Windows Apps](https://intune.microsoft.com/#view/Microsoft_Intune_DeviceSettings/AppsWindowsMenu/~/windowsApps)
2. Choose **+ Create,** and then select **Windows App (Win32)**
3. [Download the Smallstep agent package](https://github.com/smallstep/step-agent-plugin/releases/latest) and select it for upload in Intune.
2. Choose **+ Create,** and then select **Line-of-business app**
3. [Download the Smallstep agent `.msi.` package](https://github.com/smallstep/step-agent-plugin/releases/latest) and select it for upload in Intune. Both `amd64` and `arm64` installers are available.
- For the App Information tab:
- Under Publisher, use “Smallstep”
- Choose “Next”
- For the Program tab:
- For Install Command, use:
```
step-agent-plugin-Setup_amd64_<version>.exe /silent
```
Replace `<version>` with the version of the Smallstep Agent being distributed.
- For Uninstall Command, use:
```
msiexec /x "{EDB2FA84-917D-4156-AA1A-4BC5BB10C682}"
```
- Choose “Next”
- For the Requirements tab:
- Operating System Architecture: 64-bit
- Minimum operating system: Windows 10 1607
- For the Detection rules tab:
- Rules format: Manually configure detection rules
- Choose **+ Add**
- Rule Type: Registry
- Key Path:
```
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EDB2FA84-917D-4156-AA1A-4BC5BB10C682}}_is1
```
- Value Name: `VersionMinor`
- Detection Method: Integer Comparison
- Operator: Greater than or equal to
- Value: `<smallstep-agent-minor-version>`
- Make sure you replace this with the current **minor** version (using SemVer conventions) of the Smallstep Agent being distributed. For example: `51` for version `0.51.0`.
- Choose “Next”
- For the Dependencies tab:
- Choose “Next”
- For the Supersedence tab:
- Choose “Next”
- For the Assignments tab:
- Assign the app to devices as desired.
- On “Review and Create” click **Create**
Expand Down