Last updated
Device identity and certificate management daemon.
$ winget install --id Smallstep.step-agent --exact --version 0.67.3Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
step-agent uses MSI (WiX). The silent install switches are /quiet /norestart.
msiexec.exe /i step-agent_amd64.msi /quiet /norestart
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
The Smallstep agent is a cross-platform daemon that enrolls devices,
performs cryptographic device attestation (TPM, cloud, OS keystore),
and manages X.509 and SSH certificate lifecycle for endpoints
managed by the Smallstep platform.
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
No known CVEs for step-agent.
Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.
More from Smallstep Labs, LLC or browse smallstep, device-identity, device-attestation.