diff --git a/platform/smallstep-agent.mdx b/platform/smallstep-agent.mdx index 6fd24745..ddccacea 100644 --- a/platform/smallstep-agent.mdx +++ b/platform/smallstep-agent.mdx @@ -38,7 +38,7 @@ Running into trouble? See the [Smallstep Agent troubleshooting guide](./troubles - macOS 13 (Ventura) or later - Secure Enclave -- The agent must be installed for a single user (multi-user deployments are not yet supported) +- The agent must be installed for a single user ## Linux @@ -56,6 +56,13 @@ Running into trouble? See the [Smallstep Agent troubleshooting guide](./troubles All platforms require an internet connection for normal operation. +On Windows and Linux, the agent supports multi-user environments, with a couple caveats: +There's currently a 1:1 mapping in our backend between users and devices. +This works well on shared systems. +It only becomes a problem if user-based properties need to be included +in credentials issued by the agent. +Also, on Linux, a TPM access broker (eg. `tpm2-abrmd`) is needed when multiple processes are using the TPM. + ## Windows - *Administrator privileges* — the Smallstep Agent requires privilege escalation to be able to communicate with the TPM.