Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide additional documentation for advance parameter usage with Register-C4bEndpoint.ps1 #1118

Merged
merged 2 commits into from
Jan 17, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,125 @@
---
order: 21
xref: qsg-advanced-endpoint-config
title: Advanced Endpoint Configuration
description: Deploy Chocolatey for Business from a Quick Start Environment with advanced configuration options.
---
import Callout from '@choco/components/Callout.astro';
import Iframe from '@choco/components/Iframe.astro';
import Xref from '@components/Xref.astro';

The minimum configuration for a Chocolatey for Business client installs, licenses, and configurations Chocolatey to work with the deployed repository solution and Chocolatey Central Management.
While this opinionated approach is fine for most situations, flexibility is required for some organizations. This page provides examples of different scnenarios in which you wish to deploy Chocolatey in your organization.

<Callout type="info">
All examples require you to provide the credentials to connect to the repository installed during execution of the Quickstart Guide.

These credentials are found in the REAME file placed on the Desktop of the server during installation, or wherever you documented them if you changed them after installtion.
</Callout>
## Include Packaging Tools with installation

Some members of your team may be responsible for maintaining Chocolatey packages in your organization. These tools can be included in the installation by providing the `-IncludePackageTools` parameter.

```powershell
Set-Location /path/to/register-c4bendpoint.ps1
. .\Register-C4bEndpoint.ps1 -RepositoryCredential (Get-Credential) -IncludePackageTools
```

## Enable/Disable additional features with installation

Some endpoints may require a different set of features. The default installation will apply our _recommended_ configuration.
However, you can override these defaults or enable/disable additional features by providing the `-AdditionalFeatures` parameter.

In this example we will disable the use of the background service so non-admin users cannot use Chocolatey (not recommended), and enable Gloabl Confirmation so you no longer need to pass -y when performing a package operation.

```powershell
Set-Location /path/to/register-c4bendpoint.ps1
. .\Register-C4bEndpoint.ps1 -RepositoryCredential (Get-Credential) -AdditionalFeatures @{ useBackgroundService = 'Disabled'; allowGlobalCOnfirmation = 'Enabled' }
```

## Apply custom configuration during installation

You can apply custom configuration which overrides the defaults or provides additional configuration by providing the `-AdditionalConfiguration` parameter.
The following example sets the `centralManagementReportPackagesTimerIntervalInSeconds` configuration item to 21600 seconds (6 hours).

```powershell
Set-Location /path/to/register-c4bendpoint.ps1
. .\Register-C4bEndpoint.ps1 -RepositoryCredential (Get-Credential) -AdditionalConfiguration @{ 'centralManagementReportPackagesTimerIntervalInSeconds' = '21600'}
```

## Include additional Chocolatey sources

You can include additional Chocolatey sources during the installation process by providing the `-AdditionalSources` parameter.

#### Include a group repository source
In this example we will add a new source called Engineering, which is a group source configured on the repository server
that contains a repository for Engineering-specific packages, with a base repository of general use packages.

```powershell
Set-Location /path/to/register-c4bendpoint.ps1
. .\Register-C4bEndpoint.ps1 -RepositoryCredential (Get-Credential) -AdditionalSources @{Name = 'Engineering'; Source = 'https://repo.fabrikam.com/repository/EngineeringGroup/index.json'}
```

#### Include a local source

<Callout type="warning">
The local folder must exist prior to using this source.
</Callout>

This example include Packaging Tools and sets up a local folder source for package development testing.

```powershell
Set-Location /path/to/register-c4bendpoint.ps1
. .\Register-C4bEndpoint.ps1 -RepositoryCredential (Get-Credential) -IncludePackageTools -AdditionalSources @{Name = 'LocalTest'; Source = 'C:\packages\testing'}
```

#### Available options

The following is a sample hashtable of all the available options you can pass while adding additional sources.

```powershell
@{
Name = 'MySource'
Source = 'https://nexus.fabrikam.com/repository/MyChocolateySource'
#Optional items
Credentials = $MySourceCredential
AllowSelfService = $true # Defaults to $false
AdminOnly = $true # Defaults to $false
BypassProxy = $true # Defaults to $false
Priority = 10
Certificate = 'C:\cert.pfx'
CertificatePassword = 's0mepa$$'
}
```

## Install additional packages

You can install additional Chocolatey packages during the installation process by providing the `-AdditionalPackages` parameter.

<Callout type="warning">
To use this parameter, you must ensure that the package is available on configured sources.
</Callout>

#### Install the latest version of the notepadplusplus.install package
The following example installs the notepadplusplus.install package.

```powershell
Set-Location /path/to/register-c4bendpoint.ps1
. .\Register-C4bEndpoint.ps1 -RepositoryCredential (Get-Credential) -AdditionalPackages @{Id ='notepadplusplus.install'}
```

#### Install a specific version of the notepadplusplus.install package
The following example installs version 8.7.5 of the notepadplusplus.install package.

```powershell
Set-Location /path/to/register-c4bendpoint.ps1
. .\Register-C4bEndpoint.ps1 -RepositoryCredential (Get-Credential) -AdditionalPackages @{Id ='notepadplusplus.install'; Version = '8.7.5'}
```

#### Install a specific version of the notepadplusplus.install package, and pin it so it does not upgrade automaticallyThe following example installs version 8.7.5 of the notepadplusplus.install package and pins it so that it is not upgraded when using `choco upgrade`
To upgrade this package, you will need to first unpin it, and then perform the upgrade.

```powershell
Set-Location /path/to/register-c4bendpoint.ps1
. .\Register-C4bEndpoint.ps1 -RepositoryCredential (Get-Credential) -AdditionalPackages @{Id ='notepadplusplus.install'; Version = '8.7.5'; Pin = $true}
```
Original file line number Diff line number Diff line change
Expand Up @@ -283,7 +283,7 @@ export const callout4 = {
```powershell
Set-ExecutionPolicy Bypass -Scope Process -Force
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::tls12
.\Register-C4bEndpoint.ps1
.\Register-C4bEndpoint.ps1 -RepositoryCredential (Get-Credential) # Will prompt for username and password. Values found in README on Server Desktop.
```

> <details>
Expand All @@ -300,6 +300,24 @@ export const callout4 = {
> </ul>
> </details>

#### Available parameters

* `ClientCommunicationSalt` - Chocolatey Central Management Client Communication Salt Additive - The salt additive to use in the salt recipe for encrypting and verifying communication from an agent TO an instance of Central Management Service (will need to be set the same on all clients contacting that service AND the instance of the management service itself). When not set a default encryption phrase set by the system will be used. When set the unencrypted value must match exactly with what is set in the configuration for Central Management Service and every client contacting that instance of Central Management Service. Value is not shared over the wire. Because this is a much more involved process, it is recommended only setting this if you are transmitting messages over the internet. Defaults to ''. Needs to be at least 8 characters long if set or it will throw errors and use the default. Available in business editions only. IMPORTANT: If this value is set, agents less than v0.10.0 will be unable to contact Central Management to report in.
* `ServiceCommunicationSalt` -Chocolatey Central Management Service Communication Salt Additive - The salt additive to use in the salt recipe for encrypting and verifying communication FROM an instance of Central Management Service to an agent (will need to be set the same on all clients contacting that service AND the instance of the management service itself). When not set a default encryption phrase set by the system will be used. When set the unencrypted value must match exactly with what is set in the configuration for Central Management Service and every client contacting that instance of Central Management Service. Value is not shared over the wire. Because this is a much more involved process, it is recommended only setting this if you are transmitting messages over the internet. Defaults to ''. Needs to be at least 8 characters long if set or it will throw errors and use the default. Available in business editions only.
* `RepositoryCredential` - The credential to use to access the repository server from the endpoint. Details available from README file on server desktop.
* `ProxyUrl` - The URL of a proxy server to use for connecting to the repository.
* `ProxyCredential` - The credentials, if required, to connect to the proxy server.
* `IncludePackageTools` - Install the Chocolatey Licensed Extension with right-click context menus available
* `AdditionalConfiguration` - Allows for the application of user-defined configuration that is applied after the base configuration.
* `AdditionalFeatures` - Allows for the toggling of additional features that is applied after the base configuration.
* `AdditionalPackages` - Allows for the installation of additional packages after the system base packages have been installed.
* `AdditionalSources` - Allows for the addition of alternative sources after the base configuration has been applied.
* `TrustCertificate` - If passed, downloads the certificate from the client server before initializing Chocolatey Agent

#### Advanced Endpoint Configuration

It is possible to customize the installtion of Chocolatey on an endpoint via the available parameters above. For examples, please see <Xref title='Advanced Endpoint Configuration' value='qsg-advanced-endpoint-config'/>

### Conclusion

Congratulations! If you followed all the steps detailed above, you should now have a fully functioning Chocolatey for Business implementation deployed in your environment.
Expand Down
Loading