Brock Walters

Related: https://github.com/fleetdm/fleet/issues/21849 Use WebClip profile for MyDevice page on iOS/iPadOS

@noahtalerman added gong snippets for customer-flacourtia & customer-sarahwu. @harrisonravazzolo could not find a reference in Gong for prospect-ramzel on this topic. Maybe in a doc?

@marko-lisica I think this is relevant? https://fleetdm.slack.com/archives/C0389SEPLR3/p1745880430485479

@marko-lisica @noahtalerman from customer-starchik: > probably want to ensure that the Fleetd configuration profile that gets sent down normally is also excluded when a customer chooses to roll their own...

related: https://github.com/fleetdm/fleet/issues/15048

@noahtalerman @marko-lisica @roperzh So, here's my understanding, going down the list: - Genuine Apple device: This is a certificated association between literally a unique piece of Apple hardware & Apple...

@noahtalerman @roperzh pretty good summary with diagram: https://smallstep.com/blog/acme-managed-device-attestation-explained/

@noahtalerman @dherder Highly recommended on this topic: https://www.youtube.com/watch?v=Wgo_xES3-ts Joel Rennich on ACME at MacSysAdmin 2024

> @noahtalerman I think the major challenge here is to ensure that the fleetd has an understanding of the certificate revocation process and renewal. Just with script execution, I can't...

Please see: https://github.com/fleetdm/fleet/issues/20315#issuecomment-2332725189 for thoughts on using `fleetctl` to upload `.zip` & `.dmg` packages.