Chocolatey Central Management - Improve handling of rotating gMSA account passwords #408
Labels
0 - Backlog
Where tickets start after being triaged. This means the ticket has targeted milestone/labels.
CentralManagement
Issues affecting Central Management
Description
Provide customers the ability to use gMSA accounts with IIS App Pool and the Chocolatey Central Management Service and Chocolatey Agent Service. Currently, these accounts will work (as reported by the customers that use them) but they have to upgrade the packages manually every thirty days as required by the gMSA password regeneration cycle.
Why Is It Needed
The use of gMSA accounts is becoming more widespread due to their security benefits. We've had numerous customers ask about using them with Chocolatey Agent. We've now received an ask for their use with the IIS App Pool and Windows Services (Chocolatey Central Management Service and Chocolatey Agent Service.)
Related Issues and Tickets
Acceptance Tests
Done Checklist
┆Issue is synchronized with this Gitlab issue by Unito
The text was updated successfully, but these errors were encountered: