@Hugh (Zercurity) I used below command to create the service. "C:\Program Files\osquery\osqueryd\osqueryd.exe" --host_identifier=instance --enroll_tls_endpoint="C:\Program Files\osquery\api\osquery\enroll" --config_plugin=tls --config_tls_endpoint="C:\Program Files\osquery\api\osquery\config" --config_path="C:\Program Files\osquery\etc\osquery\osquery.conf" --config_refresh=10 --disable_distributed=false --distributed_plugin=tls --distributed_interval=3 --distributed_tls_max_attempts=3 --distributed_tls_read_endpoint="C:\Program Files\osquery\api\osquery\distributed\read" --distributed_tls_write_endpoint="C:\Program Files\osquery\api\osquery\distributed\write" --logger_plugin=tls --logger_tls_endpoint="C:\Program Files\osquery\api\osquery\log" --logger_tls_period=10 --disable_events=false --tls_hostname=MyIP:8080 --flagfile=flagfile.txt --enroll_secret_path=enroll_secret --tls_server_certs=fleet.pem --install