Download the desktop app to start authoring. You do not need Node.js, the OSConfig CLI, PowerShell modules, administrator access, or an Azure subscription to author baselines. Installing software may still require approval on a managed computer.
ConfigForge is experimental, community-maintained, provided as-is, and not intended for production use. It is not an officially supported Microsoft product.
| Your computer | Edition and download | Capabilities |
|---|---|---|
| Windows/Linux x64 | Full v0.3.104 | Authoring and review; optional CLI-based local device operations |
| macOS, Apple Silicon (M1 or later) | Author mac-v0.3.104-author.1 | Authoring and review, including Audit Pack export; no device operations |
Both are prereleases. macOS is ARM64-only: Intel Macs and universal binaries are not supported.
- Open the release for your edition and expand Assets.
- Download the installer or portable archive for your OS and the release's checksum manifest. Do not choose the source-code archive unless you plan to build the app.
- Verify the asset's SHA-256 against the published checksum and follow the platform-specific installation instructions.
- Open ConfigForge normally. Authoring does not require elevation.
Downloads are unsigned; macOS builds are not notarized. Checksum matching does not establish publisher identity or safety. Review warnings, use only approved per-file exceptions, and do not disable SmartScreen or Gatekeeper globally. On managed computers, ask your administrator if blocked. The installation guide explains the risks and platform-specific options.
- If the Welcome dialog appears, choose Author baselines anywhere.
- Open Microsoft Baselines and confirm the catalog appears.
- Follow Your first baseline to register and export a copy.
In the Full edition, Editor mode, CLI not installed is a valid state—not an installation failure. You can ignore it while authoring. macOS Author intentionally omits CLI-health and device-operation controls.
- Local device Audit/Deploy/Revert: Full edition, a matching Windows/Linux
host, and the separately installed
oscfgCLI. Windows CLI operations require elevation. See Authoring vs deploying. - Azure Machine Configuration packaging: PowerShell 7, GuestConfiguration, and the Microsoft.OSConfig PowerShell module 1.4.10 or later on the packaging machine. Version 1.4.10 is not the PowerShell runtime version. See the complete packaging guide.
- Benchmark Mapping: your own legally licensed benchmark data. See data setup.
Read the release notes, back up your workspace at
~/.configforge/, and install the new release for the same edition.
Recheck the release checksum and unsigned-download guidance.
The workspace holds baselines, history, rationale, and available audit results.
See privacy and local storage.
For contributors or readers choosing to build reviewed source. These commands are not needed for the downloaded app.
Use Node 22.12+ LTS or 24 LTS and Git. .nvmrc and .node-version
select the default Node 22 toolchain.
git clone https://github.com/Azure/ConfigForge.git
cd ConfigForgeChoose the correct branch before restoring dependencies:
# Windows or Linux Full edition
git checkout main
node --version
npm ciFor Apple Silicon macOS:
git checkout mac-author-build
node --version
npm ciThe version check must report Node 22.12+ or 24.x. Use npm ci for a
lockfile-faithful install. If dependencies were installed under an unsupported
Node release, switch to the supported toolchain, remove node_modules, and
run npm ci again.
Windows/Linux Full:
npm run desktop:devApple Silicon macOS Author:
npm run dev:author -w @configforge/desktopThese commands open Electron with hot reload; there is no browser URL. Launch without elevation for authoring. For contributor setup and validation, see CONTRIBUTING.md.
See desktop packaging for Windows/Linux and macOS Author commands, build-host requirements, and smoke checks. A source build remains unsigned unless you arrange your own signing.