Lucas Manuel Rodriguez

> we'd like Fleet to be able to determine if the APNs certificate or DEP server token is invalid. Yes. When the user uploads the final PEM to Fleet, I...

> I'm not sure I understand. The user could still take a single action (click), correct? Say, I click Download. Then, behind the scenes Fleet takes care of the steps...

> can Fleet handle renewing SCEP certificates for the user? We still need to support this scenario for rotating SCEP CA certificates. We've discussed some ideas. AFAICS, all of them...

> We still need to support this scenario for rotating SCEP CA certificates. >> Guillaume or Lucas, do you know why we need to support this? Instead of Fleet handling...

#7675 has been merged and released in [5.5.1](https://github.com/osquery/osquery/releases/tag/5.5.1).

IMO we should close, and reopen if we managed to reproduce again.

@Smjert Super appreciate the feedback! The review comments have been addressed.

AFAICS this was fixed by https://github.com/osquery/osquery-go/pull/108 ```sh git checkout d2e851b3991b0728fdacce7e0f3a2d51a7f524cb # this is the commit before #108 $ cd examples/table $ go build -race -o main main.go $ sudo ./main...

@directionless @RebeccaMahany

> Have we updated the permissions documentation to show what each user type can do with this feature? We haven't, we'll submit a PR today.