Hi Can anyone tell me if the enroll secret is presented by t

Question

Hi Can anyone tell me if the enroll secret is presented by the client only when it initially enrolls with Fleet or does it present it at other times like check ins posting data etc

zwass · Answer

Only at first check in Later the host presents its unique node key

Dan Achin · Answer

OK thanks much Would first check in include service restart

Dan Achin · Answer

We trying to assess how difficult it would be to rotate that enroll secret as part of our standard security practices If we only use it at first check in that makes it easier to rotate slightly smiling face

seph · Answer

No not a service restart

seph · Answer

It is presented when and only when there is no node key

seph · Answer

node keys are stored in the local database directory

zwass · Answer

Rotating the enroll secret is especially easy since you can have multiple valid secrets at once But the enroll secret is rarely used anyway

Dan Achin · Answer

Awesome thanks