Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 8 additions & 1 deletion platform/smallstep-agent.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ Running into trouble? See the [Smallstep Agent troubleshooting guide](./troubles

- macOS 13 (Ventura) or later
- Secure Enclave
- The agent must be installed for a single user (multi-user deployments are not yet supported)
- The agent must be installed for a single user

## Linux

Expand All @@ -56,6 +56,13 @@ Running into trouble? See the [Smallstep Agent troubleshooting guide](./troubles

All platforms require an internet connection for normal operation.

On Windows and Linux, the agent supports multi-user environments, with a couple caveats:
There's currently a 1:1 mapping in our backend between users and devices.
This works well on shared systems.
It only becomes a problem if user-based properties need to be included
in credentials issued by the agent.
Also, on Linux, a TPM access broker (eg. `tpm2-abrmd`) is needed when multiple processes are using the TPM.

## Windows

- *Administrator privileges* — the Smallstep Agent requires privilege escalation to be able to communicate with the TPM.
Expand Down
Loading