Hello, new to the slack here - apologies if this h...
# kolide
s
Hello, new to the slack here - apologies if this has been answered before. I'm working through getting windows endpoints connected to fleet. So far I have got a kolide server and have connected a macos system to fleet however am running across issues when attempting to connect a windows box to the kolide server. Steps I've taken thus far - 1. Install the OSquery MSI 2. Update the .flags file to the configuration that has worked for the macos 3. Ran osqueryi.exe --flagfile=./osquery.flags 4. getting a no node key returned from TLS enroll plugin error
z
Usually this means it's not sending the correct enroll secret.
It can help to add
--verbose --tls_dump
and see what it is sending.
s
ah thanks, does the enroll_secret need to be in a certain file format? Here is my flags file. I'll try this now as well
z
Do those need to be backslashes?
s
I believe the syntax to be correct, otherwise I would get a cert validation error from the pem file
1
Will check that as well though
z
Seeing what osquery sends in the HTTP request will help.
s
Copy code
{
  "error": "invalid enroll secret",
  "node_invalid": true
}
let me try the enroll secret var and see if that works instead
z
That looks like the response, but we need to see the request.
s
z
enroll secret is empty
s
I changed the enroll_secret file var to the value and still getting the same error.
z
is the env var set? The way you censor the value there makes me think you are putting the enroll secret in that flag, not the name of the env var containing the enroll secret.
s
Ah, yeah I am putting the enroll secret in the flag.
Let me try that, thanks for the suggestion
Ah sweet, it works. Thanks zwass! 🙇
🍻 1