Cisco Secure Access Help

PDF

Cisco Secure Access Help

About Key Admin API Keys

Want to summarize with AI?

Log in

Describes About Key Admin API Keys in Cisco Secure Access. The Secure Access Key Admin API enables you to create and manage Secure Access API keys programmatically.


The Secure Access Key Admin API enables you to create and manage Secure Access API keys programmatically. In a REST client, use your KeyAdmin API key credentials to authenticate with Secure Access and generate a short-lived API access token. Then, make Key Admin API requests with your access token to create Secure Access API keys for your organization. You must include your access token in every API request. For more information, see Secure Access API Authentication.

You can create any number of Key Admin API keys for your organization. When you create a Key Admin API key, choose a unique key name, description, permissions, and key expiry date. If you do not set an expiration date when you add the key, Secure Access sets your Key Admin API key to never expire.

Once you add a KeyAdmin API key to Secure Access, you can refresh your key's credentials, update the key's name, description, expiration date, and permissions, and delete the API key.

Caution
If your organization uses a multi-organization setup, ensure that you generate API keys from the specific organization where the key will be used. Using a parent organization API key to generate client credentials for a child organization can cause virtual appliances to sync with the parent organization, which may lead to DNS outages or the loss of internal domain synchronization for the child organization.

Use Cases

  • Programmatically create Secure Access API keys.

  • Programmatically manage the Secure Access API keys in your organization—refresh API key credentials, update API key properties, or delete API keys.

  • Use the Key Admin API to manage the organization's Secure Access API keys.

Manage Your Secure Access Key Admin API Keys


Add a Key Admin API Key

Add Key Admin API keys in your Secure Access organization. Configure each Key Admin API key with a unique name, description, permissions, and expiry date.

Before you begin

Procedure

  1. Navigate to Admin > API Keys .


    The SSE API Keys Add No Border interface.
  2. Click KeyAdmin Keys and then click Add.

    The number of expired API keys appears next to the red triangle. The number of API keys that expire within 30 days appears next to the yellow triangle.


    The SSE Key Admin Keys No Border interface.
  3. Enter a name and description for the key.

    A name must contain less than 256 characters. The key description is optional.


    The SSE Add Name Description interface.
  4. Select the permissions for the key.


    The Key Admin Key Permissions interface.
  5. For Expiry Date, choose the expiration date for the key, or choose Never expire.


    The Key Admin Expiration Date and Save interface.
  6. (Optional) For Network Restrictions, enter a comma-separated list of public IP addresses or CIDRs, then click Add.

    Note

    You can add up to ten networks to your API key. You can only use your API key to authenticate requests for clients on the selected networks.


    The Network Restrictions Add IP Addresses interface.
  7. Click Create Key.

  8. Copy and save your KeyAdmin Key and Key Secret.

  9. Click Accept and Close.


    The API Keys Accept Close interface.

Refresh a Key Admin API Key

Refresh a Key Admin API key in your Secure Access organization.

Before you begin

Procedure

  1. Navigate to Admin > API Keys.


    The SSE API Keys Add No Border interface.
  2. Click KeyAdmin Keys, and then expand an API key.


    The SSE Key Admin Keys No Border interface.
  3. Click Refresh Key.


    The Key Admin Refresh Key Border interface.
  4. Copy and save your KeyAdmin Key and Key Secret.

  5. Click Accept and Close.


    The API Keys Accept Close interface.

Update a Key Admin API Key

Modify your Key Admin API keys in Secure Access. You can modify one setting or multiple settings on each API key.

Before you begin

Procedure

  1. Navigate to Admin > API Keys.


    The SSE API Keys Add No Border interface.
  2. Click KeyAdmin Keys, and then expand an API key.


    The SSE Key Admin Keys No Border interface.
  3. Modify the KeyAdmin Key Name, Description, Permissions, and Expiry Date.


    The SSE Key Admin Refresh No Border interface.
  4. For Network Restrictions, update the list of IP addresses or CIDRs. Click on the X to remove a network address.


    The Network Restrictions Add IP Addresses interface.
  5. Click Save.


Delete a Key Admin API Key

Delete a Key Admin API key in your Secure Access organization.

Before you begin

Procedure

  1. Navigate to Admin > API Keys.


    The SSE API Keys Add No Border interface.
  2. Click KeyAdmin Keys, and then expand an API key.


    The SSE Key Admin Keys No Border interface.
  3. Click Delete. In the dialog window, click Delete to confim the removal of the Key Admin API key.


    The API Key Delete Dialog No Border interface.