Documentation Powered by ReDoc

REST API for Intel(R) Endpoint Management Assistant V4 (v4)

Download OpenAPI specification:Download

This API uses the OAuth2 Resource Owner Password Credentials flow with token path: base URL + /api/token

802.1XSetups

Gets a collection of 802.1X Setups

Role required: Tenant Administrator, Endpoint Group Creator, or Endpoint Group User

Responses

200

Successful request

403

Forbidden

500

Internal Server Error

get /api/v4/802_1XSetups
https://localhost:61366/api/v4/802_1XSetups

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Creates an 802.1X Setup to be used by WifiSetup and Wired802.1X in AMT Profiles.

Role required: Tenant Administrator

Setup properties:

TenantId: This field is not required for this operation. If provided, it will be ignored.

PSK: This value, if provided, must be an OctetString (convertible to a byte array).

ProtectedAccessCredential: This value, if provided, must be an OctetString (convertible to a byte array).

AuthenticationProtocol: Currently, only the 0=EAP_TLS option is fully supported.

ClientAuthenticationSettings.DesignatedUsernameCN: The default value for this property is 4=UserPrincipalName. This is the user name required by the Network Policy Server (NPS), which is the RADIUS implementation by Microsoft.

Request Body schema:
application/json
TenantId
string <uuid>
SetupId
integer <int32>
SetupName
required
string
Data
required
object (IEEE8021x_Settings)

Responses

200

Successful request

400

Invalid ModelState

403

Forbidden

409

802.1X Setup name already exists

500

Internal Server Error

post /api/v4/802_1XSetups
https://localhost:61366/api/v4/802_1XSetups

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "SetupId": 0,
  • "SetupName": "string",
  • "Data":
    {
    }
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "SetupId": 0,
  • "SetupName": "string",
  • "Data":
    {
    }
}

Gets an 802.1X Setup by ID.

Role required: Tenant Administrator, Endpoint Group Creator, or Endpoint Group User

path Parameters
_802_1XSetupId
required
integer <int32>

802.1X Setup ID

Responses

200

Successful request, content returned

403

Forbidden

404

Not found

500

Internal Server Error

get /api/v4/802_1XSetups/{_802_1XSetupId}
https://localhost:61366/api/v4/802_1XSetups/{_802_1XSetupId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "SetupId": 0,
  • "SetupName": "string",
  • "Data":
    {
    }
}

Updates an 802.1X Setup by ID.

Role required: Tenant Administrator

Setup properties:

TenantId: This field is not required for this operation. If provided, it will be ignored.

PSK: This value, if provided, must be an OctetString (convertible to a byte array).

ProtectedAccessCredential: This value, if provided, must be an OctetString (convertible to a byte array).

AuthenticationProtocol: Currently, only the 0=EAP_TLS option is fully supported.

ClientAuthenticationSettings.DesignatedUsernameCN: The default value for this property is 4=UserPrincipalName. This is the user name required by the Network Policy Server (NPS), which is the RADIUS implementation by Microsoft.

path Parameters
_802_1XSetupId
required
integer <int32>

802_1X Setup ID

Request Body schema:
application/json

802_1X Setup object to update

TenantId
string <uuid>
SetupId
integer <int32>
SetupName
required
string
Data
required
object (IEEE8021x_Settings)

Responses

200

Successful request

400

Invalid ModelState

403

Forbidden

404

Not found

409

802.1X Setup name already exists or SetupId mismatch

500

Internal Server Error

put /api/v4/802_1XSetups/{_802_1XSetupId}
https://localhost:61366/api/v4/802_1XSetups/{_802_1XSetupId}

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "SetupId": 0,
  • "SetupName": "string",
  • "Data":
    {
    }
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "SetupId": 0,
  • "SetupName": "string",
  • "Data":
    {
    }
}

Deletes an 802.1X Setup by ID.

Role required: Tenant Administrator

path Parameters
_802_1XSetupId
required
integer <int32>

802.1X Setup ID

Responses

204

Successful request, no content

403

Forbidden

404

Not found

409

Cannot delete 802.1X Setup if it is still associated with AMT Profile or WiFi Setup

500

Internal Server Error

delete /api/v4/802_1XSetups/{_802_1XSetupId}
https://localhost:61366/api/v4/802_1XSetups/{_802_1XSetupId}

Gets a collection of Certificate Authorities found in the current Windows domain.

Role required: Tenant Administrator

Responses

200

Successful request

403

Forbidden

500

Internal Server Error

get /api/v4/802_1XSetups/CertificateAuthorities
https://localhost:61366/api/v4/802_1XSetups/CertificateAuthorities

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

AccessTokens

Gets a new Access Token.

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User.

This method provides Users the means to obtain a new Access Token before their current one expires.

Responses

200

Successful request, content returned

403

Forbidden

500

Internal Server Error

get /api/v4/accessTokens/getUsingExistingToken
https://localhost:61366/api/v4/accessTokens/getUsingExistingToken

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "access_token": "string",
  • "token_type": "string",
  • "expires_in": 0,
  • "userName": "string",
  • "issued": "string",
  • "expires": "string"
}

Gets a new Access Token using Windows Authentication credentials.

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

This method will only grant an Access Token under the following conditions:

  1. EMA must be installed with Windows Domain Authentication mode.
  2. The EMA server must be joined to an Active Directory domain.
  3. The caller must have an EMA account with a username that maps to a User Principal Name in Active Directory.

Responses

200

Successful request, content returned

401

Unauthorized

403

Forbidden

405

Method Not Allowed

500

Internal Server Error

get /api/v4/accessTokens/getUsingWindowsCredentials
https://localhost:61366/api/v4/accessTokens/getUsingWindowsCredentials

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "access_token": "string",
  • "token_type": "string",
  • "expires_in": 0,
  • "userName": "string",
  • "issued": "string",
  • "expires": "string"
}

Gets a new Access Token using Windows username and password. The Windows username needs to be the User Principal Name (UPN) in Active Directory.

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User. This method provides Users the means to obtain a new Access Token using Windows username and password. This method will only grant an Access Token under the following conditions:

  1. EMA must be installed with Windows Domain Authentication mode.
  2. The caller must have an EMA account with a username that maps to a User Principal Name in Active Directory.
Request Body schema:
application/json
Upn
required
string
Password
required
string

Responses

200

Successful request, content returned

401

Unauthorized

403

Forbidden

405

Not Allowed

500

Internal Server Error

post /api/v4/accessTokens/getUsingWindowsCredentials
https://localhost:61366/api/v4/accessTokens/getUsingWindowsCredentials

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Upn": "string",
  • "Password": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "access_token": "string",
  • "token_type": "string",
  • "expires_in": 0,
  • "userName": "string",
  • "issued": "string",
  • "expires": "string"
}

Method to delete expired or unused tokens

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

Responses

204

Successful request, no content

401

Unauthorized

405

Method Not Allowed

500

Internal Server Error

delete /api/v4/accessTokens/disableExistingToken
https://localhost:61366/api/v4/accessTokens/disableExistingToken

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{ }

Gets CSRF token pair set in cookies.

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User.

This method provides Users the means to get new CSRF token pair set in cookies.

Responses

204

Successful request, no content

401

Unauthorized

403

Forbidden

500

Internal Server Error

get /api/v4/accessTokens/getCSRFToken
https://localhost:61366/api/v4/accessTokens/getCSRFToken

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{ }

Agents

Gets the latest agent executable for Win32Console

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

Responses

200

Successful request, attachment returned

500

Internal Server Error

get /api/v4/agents/getWin32Console
https://localhost:61366/api/v4/agents/getWin32Console

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{ }

Gets the latest agent installer for Win32Service

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

Responses

200

Successful request, attachment returned

500

Internal Server Error

get /api/v4/agents/getWin32Service
https://localhost:61366/api/v4/agents/getWin32Service

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{ }

Gets the latest agent executable for Win64Console

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

Responses

200

Successful request, attachment returned

500

Internal Server Error

get /api/v4/agents/getWin64Console
https://localhost:61366/api/v4/agents/getWin64Console

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{ }

Gets the latest agent installer for Win64Service

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

Responses

200

Successful request, attachment returned

500

Internal Server Error

get /api/v4/agents/getWin64Service
https://localhost:61366/api/v4/agents/getWin64Service

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{ }

AjaxCookies

Gets an Ajax cookie.

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

Responses

200

Successful request, content returned

401

Unauthorized

500

Internal Server Error

get /api/v4/ajaxCookies
https://localhost:61366/api/v4/ajaxCookies

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "cookie": "string",
  • "expireTime": "2021-02-12T17:57:24Z"
}

AmtCredentials

Returns the Amt admin credentials or MEBx password, based on credential type defined in the query string, for a provisioned endpoint if its associated AmtSetup record is found in the database

Roles required: Tenant Administrator, Endpoint Group Creator or Endpoint Group User with execute right to the endpoint

When returning MEBx password, the username field in AMT credentials is always null

path Parameters
endpointId
required
string

Hex string with 64 characters and without the 0x prefix

query Parameters
credentialType
required
string

Can be 'mebx' or 'admin', it is a case sensitive string

Responses

200

Successful request, content returned

400

Bad request

403

Forbidden

404

Not found

409

Resource conflict due to not able to get the credential or password

500

Internal server error

get /api/v4/amtCredentials/{endpointId}
https://localhost:61366/api/v4/amtCredentials/{endpointId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "userName": "string",
  • "password": "string"
}

AmtDiscoveries

Submits a request to perform remote AMT Discovery by IP address. Deprecated

Role required: Tenant Administrator

IP corresponds to the IP address of the AMT computer to discover.

MAC corresponds to the MAC address of the server's network interface to be used for the discovery. The format is 6 octets separated by colons (:). For example:

{   
    ...
    "MAC":"00:1F:C6:9B:D6:67"
}
Request Body schema:
application/json

IP address object

IP
required
string
MAC
required
string

Responses

200

Successful request, content returned

400

Bad request

500

Internal server error

post /api/v4/amtDiscoveries/discoverByIP
https://localhost:61366/api/v4/amtDiscoveries/discoverByIP

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "IP": "string",
  • "MAC": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "amtDiscoveryId": "string"
}

Submits a request to perform remote AMT Discovery automatically by IP address. Deprecated

Role required: Tenant Administrator

Interval refers to the minutes between each automatic discovery execution. Interval 0 turns off automatic discoveries.

RestartManageabilityServer indicates whether to restart the Manageability Server or not, as changes to its configuration are applied only when the server is restarted.

IP corresponds to the IP address of the AMT computer to discover.

MAC corresponds to the MAC address of the server's network interface to be used for the discovery. The format is 6 octets separated by colons (:).

Request Body schema:
application/json

IP address object

Interval
required
integer <int32> [ 0 .. 2147483647 ]
RestartManageabilityServer
required
boolean
IP
required
string
MAC
required
string

Responses

204

Successful request, no content

400

Bad request

500

Internal server error

post /api/v4/amtDiscoveries/discoverByIPAutomatically
https://localhost:61366/api/v4/amtDiscoveries/discoverByIPAutomatically

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Interval": 0,
  • "RestartManageabilityServer": true,
  • "IP": "string",
  • "MAC": "string"
}

Gets the result of an AMT Discovery process by ID. Deprecated

Role required: Tenant Administrator

path Parameters
amtDiscoveryId
required
string <uuid>

AMT Discovery process ID. Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Responses

200

Successful request, content returned

404

Not found

500

Internal server error

get /api/v4/amtDiscoveries/{amtDiscoveryId}
https://localhost:61366/api/v4/amtDiscoveries/{amtDiscoveryId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtDiscoveryId": "00000000-0000-0000-0000-000000000000",
  • "Title": "string",
  • "Request":
    {
    },
  • "StartDateStr": "string",
  • "EndDateStr": "string",
  • "LastUpdatedStr": "string",
  • "ExecutionType": "manual",
  • "ExecutionTypeStr": "string",
  • "DiscoveryTypeStr": "string",
  • "Status": "requested",
  • "StatusStr": "string",
  • "AddressesQuantity": 0,
  • "Found": 0,
  • "Results":
    [
    ]
}

Gets a collection of AMT Discovery summaries. Deprecated

Role required: Tenant Administrator

The result of an AMT Discovery is referenced by its process identifier.

To get the full list of AMT Discovery processes use discoveryStatus = null.

query Parameters
discoveryStatus
string
Enum: "requested" "inProgress" "completed" "failed" "cancelled"

Filter by AMT Discovery process status

Responses

200

Successful request, content returned

500

Internal server error

get /api/v4/amtDiscoveries
https://localhost:61366/api/v4/amtDiscoveries

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Submits a request to cancel a running remote AMT Discovery process by ID. Deprecated

Role required: Tenant Administrator

path Parameters
amtDiscoveryId
required
string <uuid>

AMT Discovery process ID. Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Responses

204

Successful request, no content

404

Not found

500

Internal server error

post /api/v4/amtDiscoveries/{amtDiscoveryId}/cancel
https://localhost:61366/api/v4/amtDiscoveries/{amtDiscoveryId}/cancel

Submits a request to perform remote AMT Discovery in a subnet. It can take from minutes to hours, depending on the number of usable hosts in the given subnet. Deprecated

Role required: Tenant Administrator

StartIPAddress corresponds to any IP address of an AMT computer in a subnet, where the discovery is going to be executed.

SubnetMask can be given in dot-decimal notation or CIDR suffix.

MAC corresponds to the MAC address of the server's network interface to be used for the discovery. The format is 6 octets separated by colons (:). For example:

{   
    ...
    "SubnetMask": "255.255.255.0", or "SubnetMask": "24",
    "MAC":"00:1F:C6:9B:D6:67"
}

Note: SubnetMask "255.255.255.254" is considered invalid, since its Host Address Range is 0.

Request Body schema:
application/json

Subnet object

StartIPAddress
required
string
SubnetMask
required
string
MAC
required
string

Responses

200

Successful request, content returned

400

Bad request

500

Internal server error

post /api/v4/amtDiscoveries/discoverBySubnet
https://localhost:61366/api/v4/amtDiscoveries/discoverBySubnet

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "StartIPAddress": "string",
  • "SubnetMask": "string",
  • "MAC": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "amtDiscoveryId": "string"
}

Submits a request to perform remote AMT Discovery automatically in a subnet. It can take from minutes to hours, depending on the number of usable hosts in the given subnet. Deprecated

Role required: Tenant Administrator

Interval refers to the minutes between each automatic discovery execution. Interval 0 turns off automatic discoveries.

RestartManageabilityServer indicates whether to restart the Manageability Server or not, as changes to its configuration are applied only when the server is restarted.

StartIPAddress corresponds to any IP address of an AMT computer in a subnet, where the discovery is going to be executed.

SubnetMask can be given in dot-decimal notation or CIDR suffix.

Note: SubnetMask "255.255.255.254" is considered invalid, since its Host Address Range is 0.

MAC corresponds to the MAC address of the server's network interface to be used for the discovery. The format is 6 octets separated by colons (:).

Request Body schema:
application/json

Subnet object

Interval
required
integer <int32> [ 0 .. 2147483647 ]
RestartManageabilityServer
required
boolean
StartIPAddress
required
string
SubnetMask
required
string
MAC
required
string

Responses

204

Successful request, no content

400

Bad request

500

Internal server error

post /api/v4/amtDiscoveries/discoverBySubnetAutomatically
https://localhost:61366/api/v4/amtDiscoveries/discoverBySubnetAutomatically

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Interval": 0,
  • "RestartManageabilityServer": true,
  • "StartIPAddress": "string",
  • "SubnetMask": "string",
  • "MAC": "string"
}

Submits a request to perform remote AMT Discovery within an IP address range. Deprecated

Role required: Tenant Administrator

StartIPAddress corresponds to any IP address of an AMT computer in a subnet, where the discovery is going to be executed.

EndIPRange cannot be lower than the StartIPAddress.

MAC corresponds to the MAC address of the server's network interface to be used for the discovery. The format is 6 octets separated by colons (:). For example:

{   
    ...
    "MAC":"00:1F:C6:9B:D6:67"
}
Request Body schema:
application/json

IP address range object

StartIPAddress
required
string
EndIPRange
required
string
MAC
required
string

Responses

200

Successful request, content returned

400

Bad request

500

Internal server error

post /api/v4/amtDiscoveries/discoverByIPRange
https://localhost:61366/api/v4/amtDiscoveries/discoverByIPRange

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "StartIPAddress": "string",
  • "EndIPRange": "string",
  • "MAC": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "amtDiscoveryId": "string"
}

Submits a request to perform remote AMT Discovery automatically within an IP address range. Deprecated

Role required: Tenant Administrator

Interval refers to the minutes between each automatic discovery execution. Interval 0 turns off automatic discoveries.

RestartManageabilityServer indicates whether to restart the Manageability Server or not, as changes to its configuration are applied only when the server is restarted.

StartIPAddress corresponds to any IP address of an AMT computer in a subnet, where the discovery is going to be executed.

EndIPRange cannot be lower than the StartIPAddress.

MAC corresponds to the MAC address of the server's network interface to be used for the discovery. The format is 6 octets separated by colons (:).

Request Body schema:
application/json

IP address range object

Interval
required
integer <int32> [ 0 .. 2147483647 ]
RestartManageabilityServer
required
boolean
StartIPAddress
required
string
EndIPRange
required
string
MAC
required
string

Responses

204

Successful request, no content

400

Bad request

500

Internal server error

post /api/v4/amtDiscoveries/discoverByIPRangeAutomatically
https://localhost:61366/api/v4/amtDiscoveries/discoverByIPRangeAutomatically

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Interval": 0,
  • "RestartManageabilityServer": true,
  • "StartIPAddress": "string",
  • "EndIPRange": "string",
  • "MAC": "string"
}

Submits a request to perform remote AMT Discovery by local broadcast. Deprecated

Role required: Tenant Administrator

MAC corresponds to the MAC address of the server's network interface to be used for the discovery. The format is 6 octets separated by colons (:). For example:

{   
    ...
    "MAC":"00:1F:C6:9B:D6:67"
}
Request Body schema:
application/json

Local broadcast object

MAC
required
string

Responses

200

Successful request, content returned

400

Bad request

500

Internal server error

post /api/v4/amtDiscoveries/discoverByLocalBroadcast
https://localhost:61366/api/v4/amtDiscoveries/discoverByLocalBroadcast

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "MAC": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "amtDiscoveryId": "string"
}

Submits a request to perform remote AMT Discovery automatically by local broadcast. Deprecated

Role required: Tenant Administrator

Interval refers to the minutes between each automatic discovery execution. Interval 0 turns off automatic discoveries.

RestartManageabilityServer indicates whether to restart the Manageability Server or not, as changes to its configuration are applied only when the server is restarted.

MAC corresponds to the MAC address of the server's network interface to be used for the discovery. The format is 6 octets separated by colons (:).

Request Body schema:
application/json

Local broadcast object

Interval
required
integer <int32> [ 0 .. 2147483647 ]
RestartManageabilityServer
required
boolean
MAC
required
string

Responses

204

Successful request, no content

400

Bad request

500

Internal server error

post /api/v4/amtDiscoveries/discoverByLocalBroadcastAutomatically
https://localhost:61366/api/v4/amtDiscoveries/discoverByLocalBroadcastAutomatically

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Interval": 0,
  • "RestartManageabilityServer": true,
  • "MAC": "string"
}

AmtProfiles

Gets a list of AMT Profile summaries.

Role required: Tenant Administrator, Endpoint Group Creator, or Endpoint Group User

Responses

200

Successful request, content returned

500

Internal Server Error

get /api/v4/amtProfiles
https://localhost:61366/api/v4/amtProfiles

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Creates an AMT Profile.

Role required: Tenant Administrator or Endpoint Group Creator

The following defines the profile object's optional parameters and their default values. If no argument is provided for an optional parameter, then its default value is used.

  1. TlsAuthType: 1 = TlsNoAuth. If this is set to NoTLS, you need to specify the CIRASettings.
  2. PowerPackageSettings.PowerActiveOn: 1 = AlwaysOnInAc.
  3. PowerPackageSettings.PowerStateIdleTimeoutInMinutes: 1.
  4. ManagementInterfacesSettings.WebUIServiceEnabledState: 2 = Enabled.
  5. ManagementInterfacesSettings.KVMInterfaceState: 2 = Enabled.
  6. ManagementInterfacesSettings.UserConsentRequired: 4294967295 = All.
  7. ManagementInterfacesSettings.SOLEnabled: true.
  8. ManagementInterfacesSettings.IDEREnabled: true.
  9. ManagementInterfacesSettings.RedirectionServiceState: SOLEnabled=true and [IDEREnabled=true: 32771(IderOnSolOn); IDEREnabled=false: 32770(IderOffSolOn)]; SOLEnabled=false and [IDEREnabled=true: 32769(IderOnSolOff); IDEREnabled=false: 32768(Disabled)].
  10. FqdnSettings.FqdnSource: 0 = SharedWithHostOS.
  11. IpSettings.DHCPEnabled: true.
  12. IpSettings.SharedStaticIp: false.
  13. IpSettings.Source: 0 = DHCP.
  14. WiFiConnectionSettings.WiFiSetups: Empty collection (it is optional only if WiFiConnectionSettings.WiFiConnectionEnabledConfiguration=0)
  15. Wired802_1XSettings: An object containing _802_1Setup_DBLookupKey=null.
  16. CIRASettings (the whole object): null.
  17. CIRASettings.CIRATunnel: false.
  18. CIRASettings.EnvironmentDetectionDomainSuffix: Value to disable CIRA when the target system is in this network domain when CIRATunnel=true; Empty string when CIRATunnel=false.
  19. CIRASettings.CIRAProxies (the whole object): Empty collection.
Request Body schema:
application/json

AMT Profile object to create

Name
required
string
Description
required
string
TlsAuthType
string
Enum: "noTLS" "tlsNoAuth" "tlsRemoteAuth" "tlsLocalAuth" "tlsAuth"

An integer representing TLS Authentication Mode. Current supported modes are 'noTLS' (TLS disabled) and 'TlsNoAuth' (TLS enabled, no authentication mode)

PowerPackageSettings
required
object (Power)
ManagementInterfacesSettings
required
object (ManagementInterfaces)
FqdnSettings
required
object (FQDNSettings)
IpSettings
required
object (IPSettings)
WiFiConnectionSettings
required
object (WiFiConnection)
Wired802_1XSettings
object (Wired802_1X)
CIRASettings
object (CIRASettings)

Responses

200

Successful request, content returned

400

Bad Request

409

AMT Profile name already exists

500

Internal Server Error

post /api/v4/amtProfiles
https://localhost:61366/api/v4/amtProfiles

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Description": "string",
  • "TlsAuthType": "noTLS",
  • "PowerPackageSettings":
    {
    },
  • "ManagementInterfacesSettings":
    {
    },
  • "FqdnSettings":
    {
    },
  • "IpSettings":
    {
    },
  • "WiFiConnectionSettings":
    {
    },
  • "Wired802_1XSettings":
    {
    },
  • "CIRASettings":
    {
    }
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtProfileId": 0,
  • "TenantId": "string",
  • "Name": "string",
  • "Description": "string",
  • "TlsAuthType": "noTLS",
  • "PowerPackageSettings":
    {
    },
  • "ManagementInterfacesSettings":
    {
    },
  • "FqdnSettings":
    {
    },
  • "IpSettings":
    {
    },
  • "WiFiConnectionSettings":
    {
    },
  • "Wired802_1XSettings":
    {
    },
  • "CIRASettings":
    {
    }
}

Gets an AMT Profile by ID.

Role required: Tenant Administrator, Endpoint Group Creator, or Endpoint Group User

path Parameters
amtProfileId
required
integer <int32>

AMT Profile ID

Responses

200

Successful request, content returned

403

Forbidden

404

Not found

500

Internal Server Error

get /api/v4/amtProfiles/{amtProfileId}
https://localhost:61366/api/v4/amtProfiles/{amtProfileId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtProfileId": 0,
  • "TenantId": "string",
  • "Name": "string",
  • "Description": "string",
  • "TlsAuthType": "noTLS",
  • "PowerPackageSettings":
    {
    },
  • "ManagementInterfacesSettings":
    {
    },
  • "FqdnSettings":
    {
    },
  • "IpSettings":
    {
    },
  • "WiFiConnectionSettings":
    {
    },
  • "Wired802_1XSettings":
    {
    },
  • "CIRASettings":
    {
    }
}

Updates an AMT Profile by ID.

Role required: Tenant Administrator or Endpoint Group Creator

The properties AmtProfileId and TenantId are readonly and cannot be updated.

The following list defines the default values that would be used for any optional parameters if they are omitted from the profile object:

  1. TlsAuthType: 1 = TlsNoAuth. If this is set to NoTLS, you need to specify the CIRASettings.
  2. PowerPackageSettings.PowerActiveOn: 1 = AlwaysOnInAc.
  3. PowerPackageSettings.PowerStateIdleTimeoutInMinutes: 1.
  4. ManagementInterfacesSettings.WebUIServiceEnabledState: 2 = Enabled.
  5. ManagementInterfacesSettings.KVMInterfaceState: 2 = Enabled.
  6. ManagementInterfacesSettings.UserConsentRequired: 4294967295 = All.
  7. ManagementInterfacesSettings.SOLEnabled: true.
  8. ManagementInterfacesSettings.IDEREnabled: true.
  9. ManagementInterfacesSettings.RedirectionServiceState: SOLEnabled=true and [IDEREnabled=true: 32771(IderOnSolOn); IDEREnabled=false: 32770(IderOffSolOn)]; SOLEnabled=false and [IDEREnabled=true: 32769(IderOnSolOff); IDEREnabled=false: 32768(Disabled)].
  10. FqdnSettings.FqdnSource: 0 = SharedWithHostOS.
  11. IpSettings.DHCPEnabled: true.
  12. IpSettings.SharedStaticIp: false.
  13. IpSettings.Source: 0 = DHCP.
  14. WiFiConnectionSettings.WiFiSetups: Empty collection (it is optional only if WiFiConnectionSettings.WiFiConnectionEnabledConfiguration=0)
  15. Wired802_1XSettings: An object containing _802_1Setup_DBLookupKey=null.
  16. CIRASettings (the whole object): null.
  17. CIRASettings.CIRATunnel: false.
  18. CIRASettings.EnvironmentDetectionDomainSuffix: Value to disable CIRA when the target system is in this network domain when CIRATunnel=true; Empty string when CIRATunnel=false.
  19. CIRASettings.CIRAProxies (the whole object): Empty collection.
path Parameters
amtProfileId
required
integer <int32>

AMT Profile ID

Request Body schema:
application/json

AMT Profile object with updates

AmtProfileId
required
integer <int32>
TenantId
string
Name
required
string
Description
required
string
TlsAuthType
string
Enum: "noTLS" "tlsNoAuth" "tlsRemoteAuth" "tlsLocalAuth" "tlsAuth"

An integer representing TLS Authentication Mode. Current supported modes are 'noTLS' (TLS disabled) and 'TlsNoAuth' (TLS enabled, no authentication mode)

PowerPackageSettings
required
object (Power)
ManagementInterfacesSettings
required
object (ManagementInterfaces)
FqdnSettings
required
object (FQDNSettings)
IpSettings
required
object (IPSettings)
WiFiConnectionSettings
required
object (WiFiConnection)
Wired802_1XSettings
object (Wired802_1X)
CIRASettings
object (CIRASettings)

Responses

200

Successful request, content returned

400

Bad request

404

Not found

409

AMT profile name already exists

500

Internal Server Error

put /api/v4/amtProfiles/{amtProfileId}
https://localhost:61366/api/v4/amtProfiles/{amtProfileId}

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtProfileId": 0,
  • "TenantId": "string",
  • "Name": "string",
  • "Description": "string",
  • "TlsAuthType": "noTLS",
  • "PowerPackageSettings":
    {
    },
  • "ManagementInterfacesSettings":
    {
    },
  • "FqdnSettings":
    {
    },
  • "IpSettings":
    {
    },
  • "WiFiConnectionSettings":
    {
    },
  • "Wired802_1XSettings":
    {
    },
  • "CIRASettings":
    {
    }
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtProfileId": 0,
  • "TenantId": "string",
  • "Name": "string",
  • "Description": "string",
  • "TlsAuthType": "noTLS",
  • "PowerPackageSettings":
    {
    },
  • "ManagementInterfacesSettings":
    {
    },
  • "FqdnSettings":
    {
    },
  • "IpSettings":
    {
    },
  • "WiFiConnectionSettings":
    {
    },
  • "Wired802_1XSettings":
    {
    },
  • "CIRASettings":
    {
    }
}

Deletes an AMT Profile by ID.

Role required: Tenant Administrator or Endpoint Group Creator

path Parameters
amtProfileId
required
integer <int32>

AMT Profile ID

Responses

204

Successful request, no content

404

Not found

409

Cannot be deleted since the AMT Profile is still linked to at least one Endpoint Group

500

Internal Server Error

delete /api/v4/amtProfiles/{amtProfileId}
https://localhost:61366/api/v4/amtProfiles/{amtProfileId}

AmtProfileToEndpointGroupsAssignments

Gets a list of Endpoint Groups associated with a given AmtProfileId.

Role required: Tenant Administrator, Endpoint Group Creator, or Endpoint Group User

404 will be returned if AmtProfileId is not found.

path Parameters
amtProfileId
required
integer <int32>

AMT Profile ID

Responses

200

Successful request, content returned

403

Forbidden

404

Not found

500

Internal Server Error

get /api/v4/amtProfileToEndpointGroupsAssignments/{amtProfileId}
https://localhost:61366/api/v4/amtProfileToEndpointGroupsAssignments/{amtProfileId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointGroupCount": 0,
  • "AccessibleEndpointGroups":
    [
    ]
}

AmtProvisioningCertificates

Gets a collection certificates required for AMT provisioning

Role required: Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

Responses

200

Successful request, content returned

401

Unauthorized

403

Forbidden

500

Internal server error

get /api/v4/amtProvisioningCertificates
https://localhost:61366/api/v4/amtProvisioningCertificates

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Gets a certificate used for AMT provisioning by ID

Role required: Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

path Parameters
amtCertificateId
required
integer <int32>

Responses

200

Successful request, content returned

401

Unauthorized

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/amtProvisioningCertificates/{amtCertificateId}
https://localhost:61366/api/v4/amtProvisioningCertificates/{amtCertificateId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtCertificateId": 0,
  • "Name": "string",
  • "CommonName": "string",
  • "NotBefore": "2021-02-12T17:57:25Z",
  • "NotAfter": "2021-02-12T17:57:25Z",
  • "HasPrivateKey": true,
  • "Thumbprint": "string",
  • "IsAmtProvisioningCert": true,
  • "InUseByAmtProfile": true,
  • "Pem": "string",
  • "Enabled": true,
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "CreatedOn": "2021-02-12T17:57:25Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:25Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000"
}

Deletes a certificate used for AMT provisioning, as well as the next ones in the chain serially if they are not a part of another chain.

Role required: Tenant Administrator

path Parameters
amtCertificateId
required
integer <int32>

Responses

204

Successful request, no content

401

Unauthorized

403

Forbidden

404

Not found

409

Conflict: certificate is in use by AMT profile

500

Internal server error

delete /api/v4/amtProvisioningCertificates/{amtCertificateId}
https://localhost:61366/api/v4/amtProvisioningCertificates/{amtCertificateId}

Gets the .CER file of an AMT provisioning certificate, or a certificate in its chain, by ID

Role required: Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

The filename of the .CER file will will be specified in the "filename" parameter of the "Content-Disposition" header.

path Parameters
amtCertificateId
required
integer <int32>

Responses

200

Successful request, attachment returned

401

Unauthorized

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/amtProvisioningCertificates/{amtCertificateId}/getFile
https://localhost:61366/api/v4/amtProvisioningCertificates/{amtCertificateId}/getFile

Upload .PFX of AMT provisioning certificate

Role required: Tenant Administrator

To import an AMT provisioning certificate, POST with enctype "multipart/form-data", the .PFX file attached, and the following parameters:
name: certificate nickname
password: password for the .PFX file

Responses

200

Successful request, content returned

400

Invalid file

401

Unauthorized

403

Forbidden

404

Not found

409

Conflict: certificate thumbprint already exists

415

Unsupported media type

500

Internal Server Error

post /api/v4/amtProvisioningCertificates/uploadPfx
https://localhost:61366/api/v4/amtProvisioningCertificates/uploadPfx

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Upload .PFX general certificates

Role required: Tenant Administrator

To import an certificate, POST with enctype "multipart/form-data", the .PFX file attached, and the following parameters:
name: certificate nickname
password: password for the .PFX file

Responses

200

Successful request, content returned

400

Invalid file

401

Unauthorized

403

Forbidden

404

Not found

415

Unsupported media type

500

Internal Server Error

post /api/v4/amtProvisioningCertificates/upload
https://localhost:61366/api/v4/amtProvisioningCertificates/upload

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

AmtSetups

Gets the AmtSetup (or provisioning record) of an Endpoint

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with View right to the resource.

path Parameters
amtSetupId
required
string

Use value of EndpointId. Hex string with 64 characters and without the 0x prefix

Responses

200

Successful request, content returned

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/amtSetups/endpoints/{amtSetupId}
https://localhost:61366/api/v4/amtSetups/endpoints/{amtSetupId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtSetupId": "string",
  • "Type": "auto",
  • "PID": "string",
  • "Creation": "2021-02-12T17:57:25Z",
  • "SetsRandomMebxPassword": true,
  • "Profile":
    {
    },
  • "State": "creation",
  • "StateString": "string",
  • "ExtraAmtInfo":
    {
    },
  • "AmtProfileId": 0
}

Deletes the AmtSetup (or provisioning record) of an Endpoint

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Execute right to the endpoint.

path Parameters
amtSetupId
required
string

Use value of EndpointId. Hex string with 64 characters and without the 0x prefix

Responses

204

Successful request, no content

403

Forbidden

404

Not found

500

Internal server error

delete /api/v4/amtSetups/endpoints/{amtSetupId}
https://localhost:61366/api/v4/amtSetups/endpoints/{amtSetupId}

Gets the AmtSetup (or auto-provisioning setting) of an Endpoint Group

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with View right to the resource.

path Parameters
amtSetupId
required
string

Use value of EndpointGroupId. Hex string with 64 characters and without the 0x prefix

Responses

200

Successful request, content returned

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/amtSetups/auto/{amtSetupId}
https://localhost:61366/api/v4/amtSetups/auto/{amtSetupId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtSetupId": "string",
  • "Type": "auto",
  • "PID": "string",
  • "Creation": "2021-02-12T17:57:25Z",
  • "SetsRandomMebxPassword": true,
  • "Profile":
    {
    },
  • "State": "creation",
  • "StateString": "string",
  • "ExtraAmtInfo":
    {
    },
  • "AmtProfileId": 0
}

Deletes the AmtSetup (or auto-provisioning setting) of an Endpoint Group

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Execute right to the endpoint.

path Parameters
amtSetupId
required
string

Use value of EndpointGroupId. Hex string with 64 characters and without the 0x prefix

Responses

204

Successful request, no content

403

Forbidden

404

Not found

500

Internal server error

delete /api/v4/amtSetups/auto/{amtSetupId}
https://localhost:61366/api/v4/amtSetups/auto/{amtSetupId}

Submits a request to provision an AMT Endpoint

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Execute right to the endpoint.

Certificate provisioning will be requested only if an AMTProvisioningCertificateId is provided, otherwise host-based-provisioning will be requested.

AdminCredential.Password requirements:

between 8 and 31 characters
contains at least one number
contains both lowercase and uppercase alpha characters
contains at least one special character: '!', '@', '#', '$', '%', '^', '&amp;', '*', '(', ')', '-', '+'

CiraIntranetSuffix is applicable only when UsesCira is set to true. The value is a string of up to four comma separated domain name suffixes.

UsesTLS and UsesCira cannot be both true or both false. You need to choose one.

Request Body schema:
application/json

AMT Setup request object

EndpointId
required
string 64 characters
UsesTls
required
boolean
UsesCira
required
boolean
SetsRandomMebxPassword
boolean

If true, MEBx password must be created randomly and set in Firmware

UsesEmaAccount
required
boolean
CiraIntranetSuffix
string
AdminCredential
required
object (AdminCredential)
AmtCertificateId
integer <int32> [ 1 .. 2147483647 ]

Responses

200

Successful request, result returned

400

Bad request

403

Forbidden

404

Not found

409

Endpoint's AMT is already provisioned

500

Internal server error

post /api/v4/amtSetups/endpoints/provision
https://localhost:61366/api/v4/amtSetups/endpoints/provision

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri",
  • "UsesTls": true,
  • "UsesCira": true,
  • "SetsRandomMebxPassword": true,
  • "UsesEmaAccount": true,
  • "CiraIntranetSuffix": "string",
  • "AdminCredential":
    {
    },
  • "AmtCertificateId": 1
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtSetupId": "string",
  • "Type": "auto",
  • "PID": "string",
  • "Creation": "2021-02-12T17:57:25Z",
  • "SetsRandomMebxPassword": true,
  • "Profile":
    {
    },
  • "State": "creation",
  • "StateString": "string",
  • "ExtraAmtInfo":
    {
    },
  • "AmtProfileId": 0
}

Submits a request to unprovision an AMT Endpoint

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Execute right to the endpoint.

Warning: This operation will reset the AMT device to factory settings!

The AMT admin password is optional and should only be used to unprovision an AMT endpoint that was provisioned outside of EMA, or that has no AmtSetup (or Provisioning Record) in the database.

If the AMT Endpoint was provisioned with EMA, and the corresponding AmtSetup record is in the database, then the AMT admin password is unnecessary.

AdminCredential.Password requirements:

--between 8 and 32 characters
--contains at least one number
--contains both lowercase and uppercase alpha characters
--contains at least one special character
Request Body schema:
application/json

An unprovision AMT request

EndpointId
required
string 64 characters
AdminCredential
object (AdminCredential)

Responses

204

Successful request, no content

400

Bad request

403

Forbidden

404

Not found

409

AMT endpoint not provisioned, or TCPRELAY not enabled by policy

500

Internal server error

post /api/v4/amtSetups/endpoints/unprovision
https://localhost:61366/api/v4/amtSetups/endpoints/unprovision

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri",
  • "AdminCredential":
    {
    }
}

Sets AMT auto-provisioning for an Endpoint Group.

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Execute right to the endpoint.

For certificate provisioning, provide an AmtCertificateId in the request, otherwise Host-based-provisioning will be set.

To unset auto-provisioning, delete the AmtSetup record using the EndpointGroupId as AmtSetupId.

Request Body schema:
application/json
EndpointGroupId
required
string
AmtProfileId
required
integer <int32> [ 1 .. 2147483647 ]
SetsRandomMebxPassword
boolean

If true, MEBx password must be created randomly and set in Firmware

AdminCredential
required
object (AdminCredential)
UsesEmaAccount
required
boolean
AmtCertificateId
integer <int32>

Responses

200

Successful request, content returned

400

Bad Request

403

Forbidden

404

Not found

409

Conflict

500

Internal server error

post /api/v4/amtSetups/auto/set
https://localhost:61366/api/v4/amtSetups/auto/set

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointGroupId": "string",
  • "AmtProfileId": 1,
  • "SetsRandomMebxPassword": true,
  • "AdminCredential":
    {
    },
  • "UsesEmaAccount": true,
  • "AmtCertificateId": 0
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtSetupId": "string",
  • "Type": "auto",
  • "PID": "string",
  • "Creation": "2021-02-12T17:57:25Z",
  • "SetsRandomMebxPassword": true,
  • "Profile":
    {
    },
  • "State": "creation",
  • "StateString": "string",
  • "ExtraAmtInfo":
    {
    },
  • "AmtProfileId": 0
}

AuditEvents

Gets a list of Audit Events filterable by optional query string parameters.

Roles required: Global Administrator, Tenant Administrator

Note: Global Administrators can only access Audit Events not associated with a TenantId.

Timestamps are recorded in UTC. Use UTC format when filtering with startDateTime and/or endDateTime. For example, "2020-01-29T15:10:38.017Z"

For more information about the data used in this API, please refer to the appendix of API Guide.

query Parameters
resourceName
string

Resource Name of Audit Events

resourceID
string

Resource Id of Audit Events

callerName
string

Caller Name of Audit Events

callerID
string <uuid>

Caller Id of Audit Events

source
string
Enum: "unknown" "reserved1" "swarmServer" "ajaxServer" "webApi" "reserved2" "manageabilityServer" "fileActionsServer"

Source (enum) of Audit Events. If the value is a string and the string is not a valid string name of the enumeration item, it will be ignored.

action
string
Enum: "noAction" "login" "logout" "pageLoad" "starting" "stopping" "createAjaxCookie" "createRoutingCookie" "newMesh" "powerAction" "accountDelete" "meshDelete" "nodeDelete" "alertMessage" "httpRedirect" "tcpRedirect" "testEvent" "ajaxKVM" "ajaxTerminal" "ajaxFiles" "webSocketDirect" "webSocketManagement" "stats" "fileDownload" "fileUpload" "addAccess" "removeAccess" "amtProvisioningRecordSet" "amtProvisioningRecordClear" "amtProvisioningRecordAttempt" "amtProvisioningRecordUsed" "amtProvisioningRecordFail" "agentConnect" "userFeedback" "userNodeEvent" "userMeshEvent" "userEvent" "amtRedirectError" "amtPowerActionSuccess" "amtPowerActionFailed" "translation" "nodeEvent" "agentUninstalled" "nodeMovedToDifferentMesh" "processAmtPreCheck" "unexpectedError" "newUser" "editUser" "removeUser" "newTenant" "editTenant" "removeTenant" "newGroup" "editGroup" "removeGroup" "usersInGroupAdded" "usersInGroupRemoved" "newRole" "userRoleChange" "userAddedToGroup" "userRemovedFromGroup" "baseRolesCreated" "accessDenied" "webApiEvent" "wMI" "fileDeliver" "fileExecution" "fileSearch" "fileShortOps" "new802_1xSetup" "edit802_1xSetup" "delete802_1xSetup" "aMTDiscovery_ByIP" "aMTDiscovery_ByIPAutomatically" "aMTDiscovery_Cancel" "aMTDiscovery_BySubnet" "aMTDiscovery_BySubnetAutomatically" "aMTDiscovery_ByIPRange" "aMTDiscovery_ByIPRangeAutomatically" "aMTDiscovery_ByLocalBroadcast" "aMTDiscovery_ByLocalBroadcastAutomatically" "newAmtProfile" "editAmtProfile" "deleteAmtProfile" "newAmtProvisioningCertificate" "newGeneralCertificate" "deleteAmtProvisioningCertificate" "deleteManualProvisioning_AMTSetup" "deleteAutoProvisioning_AMTSetup" "provision_AMTSetup" "unprovision_AMTSetup" "autoProvisioningForEndpointGroup_AMTSetup" "meshUpdate" "endpointIBOperation_Reboot" "endpointIBOperation_Sleep" "endpointIBOperation_Hibernate" "endpointIBOperation_Shutdown" "endpointIBOperation_Alert" "endpointOOBOperation_Multiple_PowerOn" "endpointOOBOperation_Multiple_SleepLight" "endpointOOBOperation_Multiple_SleepDeep" "endpointOOBOperation_Multiple_PowerCycleOffSoft" "endpointOOBOperation_Multiple_PowerOffHard" "endpointOOBOperation_Multiple_Hibernate" "endpointOOBOperation_Multiple_PowerOffSoft" "endpointOOBOperation_Multiple_PowerCycleOffHard" "endpointOOBOperation_Multiple_MasterBusReset" "endpointOOBOperation_Multiple_PowerOffSoftGraceful" "endpointOOBOperation_Multiple_PowerOffHardGraceful" "endpointOOBOperation_Multiple_MasterBusResetGraceful" "endpointOOBOperation_Multiple_PowerCycleOffSoftGraceful" "endpointOOBOperation_Multiple_PowerCycleOffHardGraceful" "endpointOOBOperations_Single_PowerOn" "endpointOOBOperations_Single_SleepLight" "endpointOOBOperations_Single_SleepDeep" "endpointOOBOperations_Single_PowerCycleOffSoft" "endpointOOBOperations_Single_PowerOffHard" "endpointOOBOperations_Single_Hibernate" "endpointOOBOperations_Single_PowerOffSoft" "endpointOOBOperations_Single_PowerCycleOffHard" "endpointOOBOperations_Single_MasterBusReset" "endpointOOBOperations_Single_PowerOffSoftGraceful" "endpointOOBOperations_Single_PowerOffHardGraceful" "endpointOOBOperations_Single_MasterBusResetGraceful" "endpointOOBOperations_Single_PowerCycleOffSoftGraceful" "endpointOOBOperations_Single_PowerCycleOffHardGraceful" "userGroupAssignedToEndpointGroup" "userGroupDisassociatedFromEndpointGroup" "newWiFiSetup" "editWiFiSetup" "deleteWiFiSetup" "getAmtRoutingCookie" "validateAjaxCookie" "amtWSMAN" "checkUserAccess" "getSwarmServerId" "meshTargetHop" "mutliTargetHop" "editAjaxServerSettings" "editFileActionsServerSettings" "editManageabilityServerSettings" "editSwarmServerSettings" "editWebServerSettings" "decodeRoutingCookie" "getCRL" "revokeCertificate" "resetCRL" "resumableUploadCreate" "resumableUploadAppend" "resumableUploadDelete" "fileUploadRegister" "usbrImageUpdated" "usbrImageDeleted" "endpointOOBOperations_Multiple_PowerCycleToIderIsoSol" "endpointOOBOperations_Single_PowerCycleToIderIsoSol" "usbrSessionStarted" "usbrSessionStopped" "usbrTempFileDeletedFromDatabase" "usbrTempFileDeletedFromFilesystem" "usbrTenantDirectoryDeletedFromFilesystem" "usbrTenantFileDeletedFromFilesystem"

Action (enum) of Audit Events. If the value is a string and the string is not a valid string name of the enumeration item, it will be ignored.

resourceType
string
Enum: "nONE" "rOLE" "tENANT" "eNDPOINT_GROUP" "uSER_GROUP" "uSER" "eNDPOINT" "iNTEL_AMT_SETUP" "aMTPROFILE" "wIFISETUP" "aJAXCOOKIE" "sERVERID" "aMT_PROVISIONING_CERTIFICATE" "dEFAULT" "_802_1XSETUP" "aMTDISCOVERY" "bEARER_TOKEN" "rOUTING_COOKIE" "sERVERSETTINGS" "cRL" "rESUMABLE_UPLOAD" "uSBR_IMAGE" "uSBR_SESSION" "uSBR_ORPHAN_FILE_CLEANUP"

Resource Type (enum) of Audit Events. If the value is a string and the string is not a valid string name of the enumeration item, it will be ignored.

startDateTime
string <date-time>

Start DateTime of a range of Audit Events in UTC format, e.g., 2020-01-29T15:10:38.017Z. If the string cannot be parsed as date time, it will be ignored.

endDateTime
string <date-time>

End DateTime of a range of Audit Events in UTC format, e.g., 2020-01-29T15:10:38.017Z. If the string cannot be parsed as date time, it will be ignored.

Responses

200

Successful request, content returned

400

Bad Request

401

Unauthorized

403

Forbidden

get /api/v4/auditEvents
https://localhost:61366/api/v4/auditEvents

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

ClientCredentials

Gets a list of Client credentials objects

Role required: Global Administrator or Tenant Administrator.

  • If caller user is Global Administrator, this method will return all Client Credentials in all Tenants unless a specific tenantId is provided.
  • If caller user is Tenant Administrator, this method will return only Client Credentials for that Tenant.
query Parameters
tenantId
string

Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Responses

200

Successful request, content

400

Bad request

401

Unauthorized

500

Internal server error

get /api/v4/clientCredentials
https://localhost:61366/api/v4/clientCredentials

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Creates a set of client credentials for a Tenant. Only one Client credentials account is allowed per Tenant.

Role required: Global Administrator or Tenant Administrator.

Required parameters:

  • Client_secret
  • MaxFailedLoginAttempts - Min 5, Max 15, Default 10
  • TokenLifetimeHours - Min 1, Max 24, Default 1

Client Secret Requirements

--at least 12 characters
--contains at least one number
--contains both lowercase and uppercase alpha characters
--contains at least one special character
Request Body schema:
application/json
id
integer <int32>
userId
string <uuid>
client_id
string <uuid>
client_secret
required
string
tenantId
string <uuid>
maxFailedLoginAttempts
integer <int32> [ 5 .. 15 ]
tokenLifetimeHours
integer <int32> [ 1 .. 24 ]

Responses

200

Successful request, content

400

Bad request

401

Unauthorized

500

Internal server error

post /api/v4/clientCredentials
https://localhost:61366/api/v4/clientCredentials

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "id": 0,
  • "userId": "00000000-0000-0000-0000-000000000000",
  • "client_id": "00000000-0000-0000-0000-000000000000",
  • "client_secret": "string",
  • "tenantId": "00000000-0000-0000-0000-000000000000",
  • "maxFailedLoginAttempts": 5,
  • "tokenLifetimeHours": 1
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "id": 0,
  • "userId": "00000000-0000-0000-0000-000000000000",
  • "name": "string",
  • "client_id": "00000000-0000-0000-0000-000000000000",
  • "client_secret": "string",
  • "tenantId": "00000000-0000-0000-0000-000000000000",
  • "scope": "string",
  • "maxFailedLoginAttempts": 0,
  • "tokenLifetimeHours": 0,
  • "enabled": true
}

Updates Client Credentials for a Tenant.

Role required: Global Administrator or Tenant Administrator.

  • Global Administrators can update any Client Credentials account.
  • Only Tenant Administrators that share the same Tenant Id with a Client Credentials account, can update it.

Parameters allowed to be updated:

  • Client_secret
  • TokenLifetimeHours - Min 1, Max 24, Default 1
  • Enabled status

Client Secret Requirements

--at least 12 characters
--contains at least one number
--contains both lowercase and uppercase alpha characters
--contains at least one special character
path Parameters
clientCredentialsId
required
string

Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Request Body schema:
application/json
client_secret
string
tokenLifetimeHours
integer <int32> [ 1 .. 24 ]
enabled
boolean

Responses

200

Successful request, content

400

Bad request

401

Unauthorized

404

Not Found

500

Internal server error

put /api/v4/clientCredentials/{clientCredentialsId}
https://localhost:61366/api/v4/clientCredentials/{clientCredentialsId}

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "client_secret": "string",
  • "tokenLifetimeHours": 1,
  • "enabled": true
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "id": 0,
  • "userId": "00000000-0000-0000-0000-000000000000",
  • "name": "string",
  • "client_id": "00000000-0000-0000-0000-000000000000",
  • "client_secret": "string",
  • "tenantId": "00000000-0000-0000-0000-000000000000",
  • "scope": "string",
  • "maxFailedLoginAttempts": 0,
  • "tokenLifetimeHours": 0,
  • "enabled": true
}

Deletes Client Credentials for a Tenant.

Role required: Global Administrator or Tenant Administrator.

  • Global Administrators can delete any Client Credentials account.
  • Only Tenant Administrators that share the same Tenant Id with a Client Credentials account, can delete it.
path Parameters
clientCredentialsId
required
string

Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Responses

204

Successful request, No content

400

Bad request

401

Unauthorized

404

Not found

500

Internal server error

delete /api/v4/clientCredentials/{clientCredentialsId}
https://localhost:61366/api/v4/clientCredentials/{clientCredentialsId}

CRL

CRL Operations

Role required: Global Administrator.

Responses

200

Successful request, content returned

401

Unauthorized

403

Forbidden

500

Internal Server Error

get /api/v4/crl
https://localhost:61366/api/v4/crl

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{ }

Adds entry to the CRL. i.e., revokes a certificate

Role required: Global Administrator.

For serial number open the certificate to see details in Windows and find the Serial number's hex value.

Following are the accepted revocation reason codes:

  1. Unspecified (0)
  2. keyCompromise (1)
  3. cACompromise (2)
  4. affiliationChanged (3)
  5. superseded (4)
  6. cessationOfOperation (5)
  7. certificateHold (6)
  8. removeFromCRL (8)
  9. privilegeWithdrawn (9)
  10. aACompromise (10)

If restartEmaComponent is set to true, it will immediately restart all the EMA servers and the IIS default app pool hosting the EMA Website.

query Parameters
restartEmaComponent
boolean

Indicates whether to restart EMA Service, as changes to its configuration are applied only when the services are restarted.

Request Body schema:
application/json

Json with CRLEntry.

serialNumber
required
string
reasonCode
required
integer <int32>

Responses

204

Successful request, no content returned

400

Bad request

401

Unauthorized

403

Forbidden

500

Internal Server Error

post /api/v4/crl/AddCrlEntry
https://localhost:61366/api/v4/crl/AddCrlEntry

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "serialNumber": "string",
  • "reasonCode": 0
}

Resets the CRL to empty CRL.

Role required: Global Administrator.

If restartEmaComponent is set to true, it will immediately restart all the EMA servers and the IIS default app pool hosting the EMA Website.

query Parameters
restartEmaComponent
boolean

Indicates whether to restart EMA Service, as changes to its configuration are applied only when the services are restarted.

Responses

204

Successful request, no content returned

401

Unauthorized

403

Forbidden

500

Internal Server Error

post /api/v4/crl/ResetCRL
https://localhost:61366/api/v4/crl/ResetCRL

EndpointGroups

Gets a collection of Endpoint Group summaries.

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Read right to the resource.

Responses

200

Successful request, content returned

500

Internal Server Error

get /api/v4/endpointGroups
https://localhost:61366/api/v4/endpointGroups

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Creates a new Endpoint Group

Role required: Tenant Administrator or Endpoint Group Creator.

Password is needed when the endpoint group's policy needs to be modified. Currently, the modification of the policy is not supported yet.

Password requirements:

--at least 8 characters
--contains at least one number
--contains both lowercase and uppercase alpha characters
--contains at least one special character

UserConsentKVM_Timeout requirements:

--timeout value must fall between 1 and 65
--timeout in seconds
--this value will be taken if the AllowUserConsentKVM web permission is enabled
Request Body schema:
application/json
Name
required
string
Description
required
string
Password
required
string .*(?=^.{8,255}$)(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[&"'(\-_)=~#{[|`\\^@\]}^$*¨£µ%,;:!?./§+]).*
UserConsentKVM_Timeout
integer <int32>

Define timeout in seconds to show user consent window for In-Band KVM connection before reject the operation

Permissions
required
object (EndpointGroupPermissions)

Responses

200

Successful request, content returned

400

Invalid ModelState

409

Conflict

500

Internal Server Error

post /api/v4/endpointGroups
https://localhost:61366/api/v4/endpointGroups

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Description": "string",
  • "Password": "string",
  • "UserConsentKVM_Timeout": 0,
  • "Permissions":
    {
    }
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Description": "string",
  • "EndpointGroupId": "string",
  • "TenantId": "string",
  • "LastUpdated": "2021-02-12T17:57:25Z",
  • "UserConsentKVM_Timeout": 0,
  • "Permissions":
    {
    }
}

Gets the details of a Endpoint Group by ID.

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Read right to the resource.

path Parameters
endpointGroupId
required
string

Hex string with 64 characters and without the 0x prefix

Responses

200

Successful request, content returned

403

Forbidden

404

Not found

500

Internal Server Error

get /api/v4/endpointGroups/{endpointGroupId}
https://localhost:61366/api/v4/endpointGroups/{endpointGroupId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Description": "string",
  • "EndpointGroupId": "string",
  • "TenantId": "string",
  • "LastUpdated": "2021-02-12T17:57:25Z",
  • "UserConsentKVM_Timeout": 0,
  • "Permissions":
    {
    }
}

Updates an Endpoint Group.

Role required: Tenant Administrator or Endpoint Group Creator.

The only property that can be updated is Description.

path Parameters
endpointGroupId
required
string
Request Body schema:
application/json
Description
required
string
EndpointGroupId
required
string

Responses

200

Successful request, content returned

400

Bad Request

403

Forbidden

404

Not found

409

Conflict

500

Internal Server Error

put /api/v4/endpointGroups/{endpointGroupId}
https://localhost:61366/api/v4/endpointGroups/{endpointGroupId}

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Description": "string",
  • "EndpointGroupId": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Description": "string",
  • "EndpointGroupId": "string",
  • "TenantId": "string",
  • "LastUpdated": "2021-02-12T17:57:25Z",
  • "UserConsentKVM_Timeout": 0,
  • "Permissions":
    {
    }
}

Deletes an Endpoint Group.

Role required: Tenant Administrator or Endpoint Group Creator.

path Parameters
endpointGroupId
required
string

Hex string with 64 characters and without the 0x prefix

Responses

204

Successful request, no content

403

Forbidden

404

Not found

500

Internal server error

delete /api/v4/endpointGroups/{endpointGroupId}
https://localhost:61366/api/v4/endpointGroups/{endpointGroupId}

Gets the .msh file associated with an Endpoint Group.

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Read right to the resource.

path Parameters
endpointGroupId
required
string

Hex string with 64 characters and without the 0x prefix

Responses

200

Successful request, content returned

403

Forbidden

404

Not found

get /api/v4/endpointGroups/{endpointGroupId}/getMshFile
https://localhost:61366/api/v4/endpointGroups/{endpointGroupId}/getMshFile

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{ }

Gets the highest access right for a User to an Endpoint Group.

Role required: Tenant Administrator, Endpoint Group Creator or Endpoint Group User.

The access rights that a User has to an Endpoint Group are obtained by way of membership in User Group(s) assigned to that Endpoint Group.

path Parameters
endpointGroupId
required
string

Hex string with 64 characters and without the 0x prefix

Responses

200

Successful request

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/endpointGroups/{endpointGroupId}/getUserAccessRights
https://localhost:61366/api/v4/endpointGroups/{endpointGroupId}/getUserAccessRights

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AccessRightsId": 0,
  • "AccessRights": "string"
}

EndpointIBOperations

Submits batch request to reboot Endpoints inband

Roles required: Tenant Administrator, Endpoint Group Creator or Endpoint Group User

The action must be allowed by the Endpoint's Endpoint Group.

With an HTTP 200, the response list will contain only those EndpointIds for which a request was put on the message bus. EndpointIds for which a request was not put on the message bus for one reason or another will not appear in the response list.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointIBOperations/reboot
https://localhost:61366/api/v4/endpointIBOperations/reboot

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits batch request to sleep Endpoints inband

Roles required: Tenant Administrator, Endpoint Group Creator or Endpoint Group User

The action must be allowed by the Endpoint's Endpoint Group.

With an HTTP 200, the response list will contain only those EndpointIds for which a request was put on the message bus. EndpointIds for which a request was not put on the message bus for one reason or another will not appear in the response list.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointIBOperations/sleep
https://localhost:61366/api/v4/endpointIBOperations/sleep

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits batch request to hibernate Endpoints inband

Roles required: Tenant Administrator, Endpoint Group Creator or Endpoint Group User

The action must be allowed by the Endpoint's Endpoint Group.

With an HTTP 200, the response list will contain only those EndpointIds for which a request was put on the message bus. EndpointIds for which a request was not put on the message bus for one reason or another will not appear in the response list.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointIBOperations/hibernate
https://localhost:61366/api/v4/endpointIBOperations/hibernate

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits batch request to shutdown Endpoints inband

Roles required: Tenant Administrator, Endpoint Group Creator or Endpoint Group User

The action must be allowed by the Endpoint's Endpoint Group.

With an HTTP 200, the response list will contain only those EndpointIds for which a request was put on the message bus. EndpointIds for which a request was not put on the message bus for one reason or another will not appear in the response list.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointIBOperations/shutdown
https://localhost:61366/api/v4/endpointIBOperations/shutdown

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits batch request to alert Endpoints inband

Roles required: Tenant Administrator, Endpoint Group Creator or Endpoint Group User

The action must be allowed by the Endpoint's Endpoint Group.

With an HTTP 200, the response list will contain only those EndpointIds for which a request was put on the message bus. EndpointIds for which a request was not put on the message bus for one reason or another will not appear in the response list.

On receiving an alert, an Endpoint's desktop will popup a MessageBox that closes after a specified duration.

Request Body schema:
application/json

An object containing a list of Endpoints to which an alert will popup with indicated message and for a specified duration.
•Message: Allowed characters: space, enter, 0-9, a-z, A-Z. Maximum length: 510.
•Duration(seconds): A number between 0 and 300, with 0 for indefinite.

EndpointIds
required
Array of objects (EndpointIdDTO)
Message
required
string ^[ \r\n\dA-Za-z0-9]+$
Duration
integer <int32> [ 0 .. 300 ]

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointIBOperations/alert
https://localhost:61366/api/v4/endpointIBOperations/alert

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointIds":
    [
    ],
  • "Message": "string",
  • "Duration": 0
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

EndpointOOBOperations

Submits a batch request to perform an out of band PowerOn operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. It will send also a Wake on LAN (WOL) request to all listed endpoints, but only Intel(R) vPro(TM) endpoints are officially supported. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerOn
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerOn

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Sleep light operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/Sleep/Light
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/Sleep/Light

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Sleep Deep operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/Sleep/Deep
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/Sleep/Deep

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Power Cycle (Off soft) operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed t o execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerCycle/OffSoft
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerCycle/OffSoft

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Power off - Hard operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerOff/Hard
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerOff/Hard

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Hibernate operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/Hibernate
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/Hibernate

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Power Off-Soft operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerOff/Soft
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerOff/Soft

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Power Cycle (Off hard) operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerCycle/OffHard
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerCycle/OffHard

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Master Bus Reset operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/MasterBusReset
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/MasterBusReset

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Power Off - Soft Graceful operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerOff/SoftGraceful
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerOff/SoftGraceful

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Power Off - Hard Graceful operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerOff/HardGraceful
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerOff/HardGraceful

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Master Bus Reset Graceful operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/MasterBusReset/Graceful
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/MasterBusReset/Graceful

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Power Cycle (Off - Soft Graceful) operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerCycle/OffSoftGraceful
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerCycle/OffSoftGraceful

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band Power Cycle (Off - Hard Graceful) operation on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerCycle/OffHardGraceful
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerCycle/OffHardGraceful

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band boot to USB-R CD/DVD (*.iso) on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

If no boot-able CD/DVD image is mounted, this power command will boot based on the endpoint's boot order set in BIOS.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerCycle/BootToUsbrIso
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerCycle/BootToUsbrIso

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a batch request to perform an out of band boot to USB-R floppy (*.img) on multiple endpoints

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

If no boot-able floppy image is mounted, this power command will boot based on the endpoint's boot order set in BIOS.

With an HTTP 200, the response list will contain those EndpointIds for which a request was put on the message bus in Accepted list. EndpointIds for which a request was not put on the message bus will appear in the Forbidden, NotFound, BadRequest or InternalServerError list, depending on the case.

Request Body schema:
application/json

List of EndpointId objects

Array
EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

500

Internal Server Error

post /api/v4/endpointOOBOperations/Multiple/PowerCycle/BootToUsbrImg
https://localhost:61366/api/v4/endpointOOBOperations/Multiple/PowerCycle/BootToUsbrImg

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Accepted":
    [
    ],
  • "Forbidden":
    [
    ],
  • "NotFound":
    [
    ],
  • "BadRequest":
    [
    ],
  • "InternalServerError":
    [
    ]
}

Submits a request to perform an out of band PowerOn operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerOn
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerOn

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Sleep Light operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/Sleep/Light
https://localhost:61366/api/v4/endpointOOBOperations/Single/Sleep/Light

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Sleep Deep operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/Sleep/Deep
https://localhost:61366/api/v4/endpointOOBOperations/Single/Sleep/Deep

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Power Cycle (Off Soft) operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerCycle/OffSoft
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerCycle/OffSoft

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Power Off - Hard operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerOff/Hard
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerOff/Hard

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Hibernate operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/Hibernate
https://localhost:61366/api/v4/endpointOOBOperations/Single/Hibernate

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Power Off - Soft operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerOff/Soft
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerOff/Soft

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Power Cycle (Off Hard) operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerCycle/OffHard
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerCycle/OffHard

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Master Bus Reset operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/MasterBusReset
https://localhost:61366/api/v4/endpointOOBOperations/Single/MasterBusReset

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Power Off - Soft Graceful operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerOff/SoftGraceful
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerOff/SoftGraceful

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Power Off - Hard Graceful operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerOff/HardGraceful
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerOff/HardGraceful

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Master Bus Reset Graceful operations

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/MasterBusReset/Graceful
https://localhost:61366/api/v4/endpointOOBOperations/Single/MasterBusReset/Graceful

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Power Cycle (Off - Soft Graceful) operations

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerCycle/OffSoftGraceful
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerCycle/OffSoftGraceful

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band Power Cycle (Off - Hard Graceful) operation

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerCycle/OffHardGraceful
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerCycle/OffHardGraceful

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band boot to USB-R CD/DVD (*.iso)

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

If no boot-able CD/DVD image is mounted, this power command will boot based on the endpoint's boot order set in BIOS.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerCycle/BootToUsbrIso
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerCycle/BootToUsbrIso

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Submits a request to perform an out of band boot to USB-R floppy (*.img)

Roles required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

If no boot-able floppy image is mounted, this power command will boot based on the endpoint's boot order set in BIOS.

Request Body schema:
application/json

EndpointId object

EndpointId
required
string 64 characters

Responses

200

Successful request, content returned

400

Invalid ModelState

403

User not allowed to execute operation

409

Endpoint not ready to execute operation yet

500

Internal Server Error

post /api/v4/endpointOOBOperations/Single/PowerCycle/BootToUsbrImg
https://localhost:61366/api/v4/endpointOOBOperations/Single/PowerCycle/BootToUsbrImg

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
"string"

Endpoints

Gets the details of an Endpoint by ID

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Read right to the resource.

path Parameters
endpointId
required
string

Hex string with 64 characters and without the 0x prefix

Responses

200

Successful request, content returned

400

Bad Request

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/endpoints/{endpointId}
https://localhost:61366/api/v4/endpoints/{endpointId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri",
  • "EndpointGroupId": "stringstringstringstringstringstringstringstringstringstringstri",
  • "EndpointGroupName": "string",
  • "LastUpdate": "2021-02-12T17:57:25Z",
  • "ComputerName": "string",
  • "PlatformType": 0,
  • "AgentVersion": "string",
  • "AgentType": "string",
  • "PowerState": 0,
  • "PowerStateUpdate": "2021-02-12T17:57:25Z",
  • "IsConnected": true,
  • "IsCiraConnected": true,
  • "NodeIdentity": 0,
  • "OperatingSystem": "string",
  • "NeighborsCount": 0,
  • "AgentLocalAdminMode": "unknown",
  • "NetworkInterfaces":
    [
    ],
  • "MEInfo":
    {
    }
}

Deletes an Endpoint by ID

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Delete right to the resource.

Note: This will stop any active USB-R session to this endpoint

path Parameters
endpointId
required
string

Hex string with 64 characters and without the 0x prefix

Responses

204

Successful request, no content

403

Forbidden

404

Not found

500

Internal server error

delete /api/v4/endpoints/{endpointId}
https://localhost:61366/api/v4/endpoints/{endpointId}

Gets the Hardware information of an Endpoint using Id and AMT connection

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Read right to the resource. The Return code Not Found means endpoint doesn't exist or hardware information for it is not found as the endpoint doesn't support AMT requests

path Parameters
endpointId
required
string

Hex string with 64 characters and without the 0x prefix

Responses

200

Successful request, content returned

400

Bad Request

403

Forbidden

404

Not found

409

Conflict

500

Internal server error

get /api/v4/endpoints/{endpointId}/HardwareInfoFromAmt
https://localhost:61366/api/v4/endpoints/{endpointId}/HardwareInfoFromAmt

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AmtPlatformInfo":
    {
    },
  • "AmtBaseBoardInfo":
    {
    },
  • "AmtBiosInfo":
    {
    },
  • "AmtProcessorInfo":
    [
    ],
  • "AmtMemoryModuleInfo":
    [
    ],
  • "AmtStorageMediaInfo":
    [
    ]
}

Get a collection of Endpoint summaries, filterable by EndpointGroupId or HostName.

Role required: Tenant Administrator, Endpoint Group Creator, or Endpoint Group User.

If endpointGroupId is not specified or empty, get a collection of Endpoint summaries for all endpoint groups that this user has access to.

query Parameters
endpointGroupId
string

Endpoint Group ID

computerName
string

String as input which need to pass Computer/Host Name need to search

computerNameStartsWith
string

String as input search whose Computer/Host Name stars with given input

computerNameContains
string

String as input search whose Computer/Host Name contains given input

Responses

200

Successful request, content returned

400

Bad Request

404

Not found

500

Internal server error

get /api/v4/endpoints
https://localhost:61366/api/v4/endpoints

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

FileUploads

Gets the constraints for performing a file upload based on file type.

Role required: Tenant Administrator

fileType is a required query string parameter. Filetypes supported: usbr

query Parameters
fileType
string

Type of file to be uploaded

Responses

200

Successful request, content returned

400

Bad Request

403

Forbidden

500

Internal Server Error

get /api/v4/fileUploads/settings
https://localhost:61366/api/v4/fileUploads/settings

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "MaxBytesPerUploadRequest": 0,
  • "MaxStorageCapacityInBytes": 0,
  • "RemainingStorageCapacityInBytes": 0,
  • "ResumableUploadValidityPeriodInDays": 0
}

Uploads a file using a single request.

Role required: Tenant Administrator

This upload method is ideal for a file with a size that is within the threshold of MaxBytesPerUploadRequest, which can be obtained with GET /api/{version}/fileUploads/settings

fileType is a required query string parameter. Filetypes supported: usbr

Use multipart/form-data to attach one file with filename of up to 128 chars and with the optional field:
Description: string (256 max chars)

query Parameters
fileType
string

FileTypes name

Responses

201

Created, URI of new resource returned

400

Bad request

401

Unauthorized

403

Forbidden

409

Filename not unique

415

Unsupported media type

500

Internal Server Error

post /api/v4/fileUploads/singleRequests
https://localhost:61366/api/v4/fileUploads/singleRequests

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "ResourceUri": "string"
}

Gets the collection of resumable upload statuses.

Role required: Tenant Administrator

fileType is a required query string parameter. Filetypes supported: usbr

query Parameters
fileType
string

FileTypes name

Responses

200

Successful request, content returned

400

Bad request

401

Unauthorized

403

Forbidden

500

Internal Server Error

get /api/v4/fileUploads/resumables
https://localhost:61366/api/v4/fileUploads/resumables

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Starts a resumable upload with the first chunk of a file.

Role required: Tenant Administrator

This upload method is ideal for a file with a size that is within the threshold of MaxBytesPerUploadRequest, which can be obtained with GET /api/{version}/fileUploads/settings

fileType is a required query string parameter. Filetypes supported: usbr

Use multipart/form-data to attach one file chunk with the following required fields:
fileName: string (128 max chars)
fileSize: int (total bytes of a completed file)
The following field is optional:
description: string (256 max chars)

After uploading the first chunk, use PUT to upload each subsequent chunk, which will be appended in order to the file until it is complete. The resumable upload needs to be completed before the session expires.

query Parameters
fileType
string

FileTypes name

Responses

201

Created, URI of new resource returned

202

Accepted, chunk appended, resumable status returned

400

Bad request

401

Unauthorized

403

Forbidden

409

Filename not unique

415

Unsupported media type

500

Internal Server Error

post /api/v4/fileUploads/resumables
https://localhost:61366/api/v4/fileUploads/resumables

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "ResumableId": "00000000-0000-0000-0000-000000000000",
  • "FileName": "string",
  • "FileType": "string",
  • "UploadedBytes": 0,
  • "FileSize": 0,
  • "Description": "string",
  • "Expiration": "2021-02-12T17:57:25Z",
  • "ResourceUri": "string"
}

Gets the status of a resumable upload by Id.

Role required: Tenant Administrator

path Parameters
resumableId
required
string

Guid format: 00000000-0000-0000-0000-000000000000

Responses

200

Successful request, content returned

400

Bad request

401

Unauthorized

403

Forbidden

404

Not found

500

Internal Server Error

get /api/v4/fileUploads/resumables/{resumableId}
https://localhost:61366/api/v4/fileUploads/resumables/{resumableId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "ResumableId": "00000000-0000-0000-0000-000000000000",
  • "FileName": "string",
  • "FileType": "string",
  • "UploadedBytes": 0,
  • "FileSize": 0,
  • "Description": "string",
  • "Expiration": "2021-02-12T17:57:25Z",
  • "ResourceUri": "string"
}

Uploads a subsequent chunk of a resumable upload.

Role required: Tenant Administrator

Use multipart/form-data to attach one file chunk.
Each subsequent chunk will be appended to the file in order until it is complete. The resumable upload needs to be completed before the session expires. When a file is completed, the resumable upload session will be removed.

path Parameters
resumableId
required
string

Responses

201

Created, URI of new resource returned

202

Accepted, chunk appended, resumable status returned

400

Bad request

401

Unauthorized

403

Forbidden

404

Not found

415

Unsupported media type

500

Internal Server Error

put /api/v4/fileUploads/resumables/{resumableId}
https://localhost:61366/api/v4/fileUploads/resumables/{resumableId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "ResumableId": "00000000-0000-0000-0000-000000000000",
  • "FileName": "string",
  • "FileType": "string",
  • "UploadedBytes": 0,
  • "FileSize": 0,
  • "Description": "string",
  • "Expiration": "2021-02-12T17:57:25Z",
  • "ResourceUri": "string"
}

Cancels a resumable upload by Id.

Role required: Tenant Administrator

path Parameters
resumableId
required
string

Guid format: 00000000-0000-0000-0000-000000000000

Responses

200

Successful request, content returned

400

Bad request

401

Unauthorized

403

Forbidden

404

Not found

500

Internal Server Error

delete /api/v4/fileUploads/resumables/{resumableId}
https://localhost:61366/api/v4/fileUploads/resumables/{resumableId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{ }

NetworkInterfaces

Gets a collection of network interfaces of the EMA server.

Role required: Global Administrator or Tenant Administrator

Responses

200

Successful request, content returned

500

Internal server error

get /api/v4/networkInterfaces
https://localhost:61366/api/v4/networkInterfaces

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Roles

Gets a collection of Roles.

Role required: Global Administrator, Tenant Administrator, or Account Manager.

Responses

200

Successful request, content returned

500

Internal Server Error

get /api/v4/roles
https://localhost:61366/api/v4/roles

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Gets the details of a Role by ID.

Role required: Global Administrator, Tenant Administrator, or Account Manager.

path Parameters
roleId
required
integer <int32>

Role ID

Responses

200

Successful request, content returned

403

Forbidden

404

Not found

500

Internal Server Error

get /api/v4/roles/{roleId}
https://localhost:61366/api/v4/roles/{roleId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "RoleId": 0,
  • "Name": "string",
  • "Description": "string",
  • "LastUpdated": "2021-02-12T17:57:25Z",
  • "Enabled": true,
  • "TenantId": "00000000-0000-0000-0000-000000000000"
}

ServerCertificates

Gets a collection of server certificates.

Role required: Global Administrator

Responses

200

Successful request, content returned

401

Unauthorized

403

Forbidden

500

Internal server error

get /api/v4/serverCertificates
https://localhost:61366/api/v4/serverCertificates

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Gets a server certificate by name

Role required: Global Administrator

path Parameters
certificateName
required
string

The certificate name used in Intel(R) EMA database. This is not the subject name or the common name.

Responses

200

Successful request, content returned

401

Unauthorized

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/serverCertificates/{certificateName}
https://localhost:61366/api/v4/serverCertificates/{certificateName}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "CommonName": "string",
  • "NotBefore": "2021-02-12T17:57:25Z",
  • "NotAfter": "2021-02-12T17:57:25Z",
  • "HasPrivateKey": true,
  • "Thumbprint": "string",
  • "Pem": "string",
  • "LastModified": "2021-02-12T17:57:25Z"
}

Gets the .CER file of an server certificate by name

Role required: Global Administrator

The filename of the .CER file will will be specified in the "filename" parameter of the "Content-Disposition" header.

path Parameters
certificateName
required
string

The certificate name used in Intel(R) EMA database. This is not the subject name or the common name.

Responses

200

Successful request, attachment returned

401

Unauthorized

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/serverCertificates/{certificateName}/getFile
https://localhost:61366/api/v4/serverCertificates/{certificateName}/getFile

ServerSettings

Gets a the automatic AMT discovery settings of the Manageability server.

Role required: Global Administrator or Tenant Administrator. TenatId corresponds to the Tenant Administrator who submitted the automatic AMT discovery request.

Responses

200

Successful request, content returned

500

Internal server error

get /api/v4/serverSettings/amtDiscoverySettings
https://localhost:61366/api/v4/serverSettings/amtDiscoverySettings

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Interval": 0,
  • "Type": "singleIP",
  • "TypeStr": "string",
  • "MAC": "string",
  • "FirstIPAddress": "string",
  • "EndRangeIPAddress": "string",
  • "SubnetMask": "string",
  • "TenantId": "string"
}

Gets the settings of the Ajax server.

Role required: Global Administrator.

Responses

200

Successful request, content returned

403

Forbidden

404

Not Found

500

Internal server error

get /api/v4/serverSettings/ajaxServer
https://localhost:61366/api/v4/serverSettings/ajaxServer

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Data":
    {
    },
  • "ModifiedOn": "2021-02-12T17:57:26Z"
}

Sets the settings of the Ajax server.

Role required: Global Administrator.

Restart service indicates whether to restart the Ajax Server or not, as changes to its configuration are applied only when the service is restarted.

query Parameters
restartEMAService
boolean

Indicates whether to restart the Ajax service or not.

Request Body schema:
application/json

Json with updated server settings.

ajaxCookieAutoRefreshRange
required
integer <int32> [ 1 .. 60 ]
ajaxCookieIdleTimeout
required
integer <int32> [ 1 .. 720 ]
httpheader_Access-Control-Allow-Headers
required
string [ 0 .. 1024 ] characters
logfilepath
required
string
maxdbconnections
required
integer <int32> [ 4 .. 10000 ]
swarmserver
required
Array of objects (LoadBalanceSetting)
userAccessFailedMaxCount
required
integer <int32> [ 1 .. 50 ]
expiresessions
required
boolean
serverIps
required
Array of strings
messagePort
required
integer <int32> [ 0 .. 65535 ]

Responses

200

Successful request, content returned

400

Bad request

403

Forbidden

404

Not Found

500

Internal server error

put /api/v4/serverSettings/ajaxServer
https://localhost:61366/api/v4/serverSettings/ajaxServer

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "ajaxCookieAutoRefreshRange": 1,
  • "ajaxCookieIdleTimeout": 1,
  • "httpheader_Access-Control-Allow-Headers": "string",
  • "logfilepath": "string",
  • "maxdbconnections": 4,
  • "swarmserver":
    [
    ],
  • "userAccessFailedMaxCount": 1,
  • "expiresessions": true,
  • "serverIps":
    [
    ],
  • "messagePort": 0
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Data":
    {
    },
  • "ModifiedOn": "2021-02-12T17:57:26Z"
}

Gets the settings of the Manageability server.

Role required: Global Administrator.

Responses

200

Successful request, content returned

403

Forbidden

404

Not Found

500

Internal server error

get /api/v4/serverSettings/manageabilityServer
https://localhost:61366/api/v4/serverSettings/manageabilityServer

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Data":
    {
    },
  • "ModifiedOn": "2021-02-12T17:57:26Z"
}

Sets the settings of the Manageability server.

Role required: Global Administrator.

Restart service indicates whether to restart the Manageability Server or not, as changes to its configuration are applied only when the service is restarted.

query Parameters
restartEMAService
boolean

Indicates whether to restart the Manageability service or not.

Request Body schema:
application/json

Json with updated server settings.

ciraserver_ip
string
ciraserver_host
required
string
ciraserver_port
required
integer <int32> [ 0 .. 65535 ]
logfilepath
required
string
maxdbconnections
required
integer <int32> [ 4 .. 10000 ]
swarmserver
required
Array of objects (LoadBalanceSetting)
serverIps
required
Array of strings
messagePort
required
integer <int32> [ 0 .. 65535 ]
usbrImagesRootDirectory
required
string
maxUsbrImageStorageCapacityPerTenantInGigabytes
required
integer <int32> [ 0 .. 50 ]
maxUsbrImageStorageCapacityPerEmaInstanceInGigabytes
required
integer <int32> [ 0 .. 100 ]
maxUsbrSlotCountPerTenant
required
integer <int32> [ 0 .. 20 ]
maxUsbrIdleTimeInMinutes
required
integer <int32> [ 1 .. 3600 ]
usbrRedirectionManagerLoopIntervalInSeconds
required
integer <int32> [ 1 .. 120 ]
usbrRedirectionThrottlingRateInMilliseconds
required
integer <int32> [ 0 .. 1000 ]
fileUploadRetentionPeriodInDays
required
integer <int32> [ 1 .. 365 ]
fileUploadCleanupIntervalInHours
required
integer <int32> [ 4 .. 24 ]
AuditLogCleanupIntervalInHours
required
integer <int32> [ 1 .. 24 ]
AuditLogRetentionPeriodInDays
required
integer <int32> [ 1 .. 365 ]

Responses

200

Successful request, content returned

400

Bad request

403

Forbidden

404

Not Found

500

Internal server error

put /api/v4/serverSettings/manageabilityServer
https://localhost:61366/api/v4/serverSettings/manageabilityServer

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "ciraserver_ip": "string",
  • "ciraserver_host": "string",
  • "ciraserver_port": 0,
  • "logfilepath": "string",
  • "maxdbconnections": 4,
  • "swarmserver":
    [
    ],
  • "serverIps":
    [
    ],
  • "messagePort": 0,
  • "usbrImagesRootDirectory": "string",
  • "maxUsbrImageStorageCapacityPerTenantInGigabytes": 0,
  • "maxUsbrImageStorageCapacityPerEmaInstanceInGigabytes": 0,
  • "maxUsbrSlotCountPerTenant": 0,
  • "maxUsbrIdleTimeInMinutes": 1,
  • "usbrRedirectionManagerLoopIntervalInSeconds": 1,
  • "usbrRedirectionThrottlingRateInMilliseconds": 0,
  • "fileUploadRetentionPeriodInDays": 1,
  • "fileUploadCleanupIntervalInHours": 4,
  • "AuditLogCleanupIntervalInHours": 1,
  • "AuditLogRetentionPeriodInDays": 1
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Data":
    {
    },
  • "ModifiedOn": "2021-02-12T17:57:26Z"
}

Gets the settings of the Swarm server.

Role required: Global Administrator.

Responses

200

Successful request, content returned

403

Forbidden

404

Not Found

500

Internal server error

get /api/v4/serverSettings/swarmServer
https://localhost:61366/api/v4/serverSettings/swarmServer

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Data":
    {
    },
  • "ModifiedOn": "2021-02-12T17:57:26Z"
}

Sets the settings of the Swarm server.

Role required: Global Administrator.

Restart service indicates whether to restart the Swarm Server or not, as changes to its configuration are applied only when the service is restarted.

query Parameters
restartEMAService
boolean

Indicates whether to restart the Swarm service or not.

Request Body schema:
application/json

Json with updated server settings.

adminport
required
integer <int32> [ 0 .. 65535 ]
adminportlocal
required
integer <int32> [ 0 .. 1 ]
logfilepath
required
string
enableCIRAPowerPolling
required
boolean
maxdbconnections
required
integer <int32> [ 4 .. 10000 ]
swarmserver
required
Array of objects (LoadBalanceSetting)
serverIps
required
Array of strings
messagePort
required
integer <int32> [ 0 .. 65535 ]
tcpConnRetrySeconds
required
integer <int32> [ 5 .. 86400 ]
tcpConnIdleSeconds
required
integer <int32> [ 5 .. 7200 ]

Responses

200

Successful request, content returned

400

Bad request

403

Forbidden

404

Not Found

500

Internal server error

put /api/v4/serverSettings/swarmServer
https://localhost:61366/api/v4/serverSettings/swarmServer

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "adminport": 0,
  • "adminportlocal": 0,
  • "logfilepath": "string",
  • "enableCIRAPowerPolling": true,
  • "maxdbconnections": 4,
  • "swarmserver":
    [
    ],
  • "serverIps":
    [
    ],
  • "messagePort": 0,
  • "tcpConnRetrySeconds": 5,
  • "tcpConnIdleSeconds": 5
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Data":
    {
    },
  • "ModifiedOn": "2021-02-12T17:57:26Z"
}

Gets the settings of the Web server.

Role required: Global Administrator.

Responses

200

Successful request, content returned

403

Forbidden

404

Not Found

500

Internal server error

get /api/v4/serverSettings/webServer
https://localhost:61366/api/v4/serverSettings/webServer

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Data":
    {
    },
  • "ModifiedOn": "2021-02-12T17:57:26Z"
}

Sets the settings of the Web server.

Role required: Global Administrator.

Sync web settings indicates whether to synchronize the EMA Website app settings, in the Web server, with the Web server settings from the EMADatabase, or not.

query Parameters
syncWebSettings
boolean

True or false value.

Request Body schema:
application/json

Json with updated server settings.

AccessTokenTimeToLive
required
integer <int32> [ 60 .. 43200 ]
AjaxServerHost
required
string
AllowedDomains
required
string [ 0 .. 1024 ] characters
EnableAllowedDomains
required
integer <int32> [ 0 .. 1 ]
logfilepath
required
string
SwarmServerHost
required
string
SwarmServerPort
required
integer <int32> [ 0 .. 65535 ]
GlobalCatalogPort
required
integer <int32> [ 0 .. 65535 ]
MaxAccesstokenTTL
required
integer <int32> [ 1 .. 168 ]
frontendstoragetype
required
string
maxdbconnections
required
integer <int32> [ 4 .. 10000 ]

Responses

200

Successful request, content returned

400

Bad request

403

Forbidden

404

Not Found

500

Internal server error

put /api/v4/serverSettings/webServer
https://localhost:61366/api/v4/serverSettings/webServer

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "AccessTokenTimeToLive": 60,
  • "AjaxServerHost": "string",
  • "AllowedDomains": "string",
  • "EnableAllowedDomains": 0,
  • "logfilepath": "string",
  • "SwarmServerHost": "string",
  • "SwarmServerPort": 0,
  • "GlobalCatalogPort": 0,
  • "MaxAccesstokenTTL": 1,
  • "frontendstoragetype": "string",
  • "maxdbconnections": 4
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "Name": "string",
  • "Data":
    {
    },
  • "ModifiedOn": "2021-02-12T17:57:26Z"
}

Tenants

Gets a collection of Tenants .

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User.

Responses

200

Successful request, content returned

404

Not found

500

Internal Server Error

get /api/v4/tenants
https://localhost:61366/api/v4/tenants

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Creates a Tenant.

Role required: Global Administrator

Request Body schema:
application/json

Tenant object to create.

CreatedBy
string <uuid>
CreatedOn
string <date-time>
TenantId
string <uuid>
ModifiedBy
string <uuid>
ModifiedOn
string <date-time>
Description
required
string
Name
required
string

Responses

200

Successful request, content returned

400

Bad request

409

Conflict

500

Internal Server Error

post /api/v4/tenants
https://localhost:61366/api/v4/tenants

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "Description": "string",
  • "Name": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "Description": "string",
  • "Name": "string"
}

Gets the details of a Tenant by ID.

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User.

path Parameters
tenantId
required
string

Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Responses

200

Successful request, content returned

400

Bad Request Error

403

Forbidden

404

Not found

500

Internal Server Error

get /api/v4/tenants/{tenantId}
https://localhost:61366/api/v4/tenants/{tenantId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "Description": "string",
  • "Name": "string"
}

Updates a Tenant.

Role required: Global Administrator

Only the fields Name and Description can be updated.

path Parameters
tenantId
required
string <uuid>

Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Request Body schema:
application/json

Tenant object to update

CreatedBy
string <uuid>
CreatedOn
string <date-time>
TenantId
string <uuid>
ModifiedBy
string <uuid>
ModifiedOn
string <date-time>
Description
required
string
Name
required
string

Responses

200

Successful request, content returned

400

Bad request

404

Not found

500

Internal server error

put /api/v4/tenants/{tenantId}
https://localhost:61366/api/v4/tenants/{tenantId}

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "Description": "string",
  • "Name": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "Description": "string",
  • "Name": "string"
}

Deletes a Tenant By ID

Role required: Global Administrator

During tenant deletion, the active USBR sessions for the tenant are stopped, and the USBR image files for the tenant are deleted.

path Parameters
tenantId
required
string

Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Responses

204

Successful request, no content

400

Bad request

404

Not found

500

Internal server error

delete /api/v4/tenants/{tenantId}
https://localhost:61366/api/v4/tenants/{tenantId}

UsbrImages

Gets a collection of USBR image metadata.

Role required: Tenant Administrator, EndPoint Group Creator, EndPoint Group User

File hash is SHA2-256.

Responses

200

Successful request, content returned

403

Forbidden

500

Internal Server Error

get /api/v4/usbr/images
https://localhost:61366/api/v4/usbr/images

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Gets a USBR image metadata by Id.

Role required: Tenant Administrator, EndPoint Group Creator, EndPoint Group User

File hash is SHA2-256.

path Parameters
usbrImageId
required
integer <int32>

Id of USBR image metadata

Responses

200

Successful request, content returned

403

Forbidden

404

NotFound

500

Internal Server Error

get /api/v4/usbr/images/{usbrImageId}
https://localhost:61366/api/v4/usbr/images/{usbrImageId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UsbrImageId": 0,
  • "FileName": "string",
  • "FileDescription": "string",
  • "FileBytes": 0,
  • "LastUpdated": "2021-02-12T17:57:26Z",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "FileHashString": "string"
}

Updates a USBR image metadata by Id.

Role required: Tenant Administrator

Only the name and the description of the image can be updated. All other fields are read-only.

Filename must be unique per tenant.

File hash is SHA2-256.

path Parameters
usbrImageId
required
integer <int32>

Id of USBR image metadata to update

Request Body schema:
application/json

Updated USBR image metadata

UsbrImageId
integer <int32>
FileName
required
string
FileDescription
required
string
FileBytes
integer <int64>
LastUpdated
string <date-time>
TenantId
string <uuid>
FileHashString
string

Responses

200

Successful request, content returned

400

Bad Request

403

Forbidden

404

NotFound

409

Conflict due to file in use or to filename is not unique

500

Internal Server Error

put /api/v4/usbr/images/{usbrImageId}
https://localhost:61366/api/v4/usbr/images/{usbrImageId}

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UsbrImageId": 0,
  • "FileName": "string",
  • "FileDescription": "string",
  • "FileBytes": 0,
  • "LastUpdated": "2021-02-12T17:57:26Z",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "FileHashString": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UsbrImageId": 0,
  • "FileName": "string",
  • "FileDescription": "string",
  • "FileBytes": 0,
  • "LastUpdated": "2021-02-12T17:57:26Z",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "FileHashString": "string"
}

Deletes a USBR image file and its metadata by Id.

Role required: Tenant Administrator

This operation deletes both the metadata and file of a USBR image given the Id.

path Parameters
usbrImageId
required
integer <int32>

Id of USBR Image to delete

Responses

204

Successful request, no content returned

403

Forbidden

404

NotFound

409

Conflict due to image file in use

500

Internal Server Error

delete /api/v4/usbr/images/{usbrImageId}
https://localhost:61366/api/v4/usbr/images/{usbrImageId}

UsbrSessions

Gets a list of USB-R sessions per tenant and with an option to filter by status.

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Execute right to the resource.

query Parameters
status
string
Enum: "initialized" "connected" "connectionDroppedMaxSessions" "disconnectedByUser" "disconnectedDueToError" "disconnectedDueToIdleTimeout" "disconnectedDueToUserConsent"

Status (enum) of USB-R Session. If the value is a string and the string is not a valid string name of the enumeration item, it will be ignored.

Responses

200

Successful request, content returned

403

Forbidden

500

Internal Server Error

get /api/v4/usbr/sessions
https://localhost:61366/api/v4/usbr/sessions

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Submits a request to start USB-R session for the specified endpoint.

Role required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

Accepted values for startMode are iderSetOnReset, iderSetGracefully, iderSetImmediately

The request requires both UsbrImageIsoId and UsbrImageImgId if only one image is used, then use 0 as the ID for the other.

Request Body schema:
application/json

usbrStartSessionRequestModel object for starting the session

EndpointId
required
string 64 characters
UsbrImageImgId
required
integer <int32> [ 0 .. 2147483647 ]
UsbrImageIsoId
required
integer <int32> [ 0 .. 2147483647 ]
StartMode
required
string
Enum: "iderSetOnReset" "iderSetGracefully" "iderSetImmediately"

Responses

200

Successful request, content returned

400

Bad Request

403

Forbidden

409

Resource Conflict

500

Internal Server Error

post /api/v4/usbr/sessions
https://localhost:61366/api/v4/usbr/sessions

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "EndpointId": "stringstringstringstringstringstringstringstringstringstringstri",
  • "UsbrImageImgId": 0,
  • "UsbrImageIsoId": 0,
  • "StartMode": "iderSetOnReset"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UsbrSessionId": "00000000-0000-0000-0000-000000000000",
  • "UsbrImageImgName": "string",
  • "UsbrImageIsoName": "string",
  • "EndpointId": "string",
  • "EndpointName": "string",
  • "UsbrImageImgId": 0,
  • "UsbrImageIsoId": 0,
  • "Status": "string",
  • "LastUpdated": "2021-02-12T17:57:26Z",
  • "UserId": "00000000-0000-0000-0000-000000000000",
  • "Username": "string",
  • "IdleTimeSeconds": 0,
  • "SessionDurationSeconds": 0
}

Submits a request to stop a USB-R session.

Role required: Tenant Administrator, user in a UserGroup with Execute privileges associated to target EndpointGroup.

path Parameters
usbrSessionId
required
string

USB-R session unique identifier

Responses

200

Successful request, content returned

400

Bad Request

403

Forbidden

404

Not Found

500

Internal Server Error

post /api/v4/usbr/sessions/{usbrSessionId}/stop
https://localhost:61366/api/v4/usbr/sessions/{usbrSessionId}/stop

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UsbrSessionId": "00000000-0000-0000-0000-000000000000",
  • "UsbrImageImgName": "string",
  • "UsbrImageIsoName": "string",
  • "EndpointId": "string",
  • "EndpointName": "string",
  • "UsbrImageImgId": 0,
  • "UsbrImageIsoId": 0,
  • "Status": "string",
  • "LastUpdated": "2021-02-12T17:57:26Z",
  • "UserId": "00000000-0000-0000-0000-000000000000",
  • "Username": "string",
  • "IdleTimeSeconds": 0,
  • "SessionDurationSeconds": 0
}

Gets USB-R request status for an AMT Endpoint by USB-R session Id.

Role required: Tenant Administrator, or Endpoint Group Creator or Endpoint Group User with Execute right to the resource.

path Parameters
usbrSessionId
required
string

USB-R Session ID

Responses

200

Successful request, content returned

400

Bad request

403

Forbidden

404

Not found

500

Internal Server Error

get /api/v4/usbr/sessions/{usbrSessionId}
https://localhost:61366/api/v4/usbr/sessions/{usbrSessionId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UsbrSessionId": "00000000-0000-0000-0000-000000000000",
  • "UsbrImageImgName": "string",
  • "UsbrImageIsoName": "string",
  • "EndpointId": "string",
  • "EndpointName": "string",
  • "UsbrImageImgId": 0,
  • "UsbrImageIsoId": 0,
  • "Status": "string",
  • "LastUpdated": "2021-02-12T17:57:26Z",
  • "UserId": "00000000-0000-0000-0000-000000000000",
  • "Username": "string",
  • "IdleTimeSeconds": 0,
  • "SessionDurationSeconds": 0
}

UserGroupMemberships

Gets a collection of names of User Group members.

Role required: Global Administrator, Tenant Administrator, Account Manager, or Endpoint Group Creator.

path Parameters
userGroupId
required
integer <int32>

User Group identifier

Responses

200

Successful request, content returned

404

Not found

500

Internal Server Error

get /api/v4/userGroupMemberships/{userGroupId}
https://localhost:61366/api/v4/userGroupMemberships/{userGroupId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Add members to a User Group.

Role required: Global Administrator, Tenant Administrator, or Account Manager.

With an HTTP 200, the response list will contain only those members that got added to the User Group. Members not added for one reason or another will not appear in the response list.

path Parameters
userGroupId
required
string

User Group ID

Request Body schema:
application/json
Array
UserName
required
string

Responses

200

Successful request, content returned

400

Bad request

404

Not found

500

Internal Server Error

post /api/v4/userGroupMemberships/{userGroupId}/addMembers
https://localhost:61366/api/v4/userGroupMemberships/{userGroupId}/addMembers

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Removes members from a User Group.

Role required: Global Administrator, Tenant Administrator, or Account Manager.

With an HTTP 200, the response list will contain only those members removed from the User Group. Members not removed for one reason or another will not appear in the response list.

path Parameters
userGroupId
required
string

User Group ID

Request Body schema:
application/json

Members to remove from a User Group

Array
UserName
required
string

Responses

200

Successful request, content returned

400

Bad request

404

Not found

500

Internal server error

post /api/v4/userGroupMemberships/{userGroupId}/removeMembers
https://localhost:61366/api/v4/userGroupMemberships/{userGroupId}/removeMembers

Request samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

UserGroups

Gets a collection of User Groups.

Role required: Global Administrator, Tenant Administrator, Account Manager, or Endpoint Group Creator.

Responses

200

Successful request, content returned

500

Internal server error

get /api/v4/userGroups
https://localhost:61366/api/v4/userGroups

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Creates a new User Group having Execute or View right.

Role required: Global Administrator, Tenant Administrator, or Account Manager.

For AccessRightsId, enter one of the two following values: 1 - Execute 2 - View

The roleId value will be automatically populated by the system

Request Body schema:
application/json

User Group object to create

UserGroupId
integer <int32>
Name
required
string
TenantId
string <uuid>
Description
required
string
CreatedOn
string <date-time>
CreatedBy
string <uuid>
ModifiedOn
string <date-time>
ModifiedBy
string <uuid>
RoleId
integer <int32>
AccessRightsId
required
string
Enum: "execute" "view"
AccessRights
string

Responses

200

Successful request, content returned

400

Bad request

409

Conflict, User Group name already exists

500

Internal Server Error

post /api/v4/userGroups
https://localhost:61366/api/v4/userGroups

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserGroupId": 0,
  • "Name": "string",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "RoleId": 0,
  • "AccessRightsId": "execute",
  • "AccessRights": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserGroupId": 0,
  • "Name": "string",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "RoleId": 0,
  • "AccessRightsId": "execute",
  • "AccessRights": "string"
}

Gets a User Group by ID.

Role required: Global Administrator, Tenant Administrator, Account Manager, or Endpoint Group Creator.

path Parameters
userGroupId
required
integer <int32>

User Group identifier

Responses

200

Successful request, content returned

400

Bad request

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/userGroups/{userGroupId}
https://localhost:61366/api/v4/userGroups/{userGroupId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserGroupId": 0,
  • "Name": "string",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "RoleId": 0,
  • "AccessRightsId": "execute",
  • "AccessRights": "string"
}

Updates a User Group by ID.

Role required: Global Administrator, Tenant Administrator, or Account Manager.

The only fields that can be updated are Name, Description and AccessRights.

For AccessRightsId, enter one of the two following values: 1 - Execute 2 - View

The roleId value will be automatically populated by the system

path Parameters
userGroupId
required
integer <int32>

The User Group identifier

Request Body schema:
application/json

UserGroup object with updated data

UserGroupId
integer <int32>
Name
required
string
TenantId
string <uuid>
Description
required
string
CreatedOn
string <date-time>
CreatedBy
string <uuid>
ModifiedOn
string <date-time>
ModifiedBy
string <uuid>
RoleId
integer <int32>
AccessRightsId
required
string
Enum: "execute" "view"
AccessRights
string

Responses

200

OK: Return content.

400

Bad request

403

Forbidden

404

Not found

409

Conflict, User Group name already exists

500

Internal Server Error

put /api/v4/userGroups/{userGroupId}
https://localhost:61366/api/v4/userGroups/{userGroupId}

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserGroupId": 0,
  • "Name": "string",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "RoleId": 0,
  • "AccessRightsId": "execute",
  • "AccessRights": "string"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserGroupId": 0,
  • "Name": "string",
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "RoleId": 0,
  • "AccessRightsId": "execute",
  • "AccessRights": "string"
}

Deletes a User Group by ID.

Role required: Global Administrator, Tenant Administrator, or Account Manager.

path Parameters
userGroupId
required
integer <int32>

The User Group identifier.

Responses

204

Successful request, no content.

403

Forbidden

404

Not found

500

Internal Server Error

delete /api/v4/userGroups/{userGroupId}
https://localhost:61366/api/v4/userGroups/{userGroupId}

UserGroupToEndpointGroupAssignments

Gets a collection of User Groups assigned to an Endpoint Group

Role required: Tenant Administrator, or Endpoint Group Creator.

path Parameters
endpointGroupId
required
string

Endpoint Group ID. Hex string with 64 characters and without the 0x prefix.

Responses

200

OK: Return content.

400

Bad request

403

Forbidden: If the caller does not have the required rights.

500

Internal Server Error: Exceptions thrown.

get /api/v4/userGroupToEndpointGroupAssignments/{endpointGroupId}
https://localhost:61366/api/v4/userGroupToEndpointGroupAssignments/{endpointGroupId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Assigns a User Group to an Endpoint Group

Role required: Tenant Administrator, or Endpoint Group Creator of a suitable User Group.

path Parameters
endpointGroupId
required
string

EndPoint Group ID. Hex string with 64 characters and without the 0x prefix.

Request Body schema:
application/json

UserGroup Identifier DTO object

UserGroupId
required
integer <int32> [ 1 .. 2147483647 ]

Responses

200

OK: Return content.

400

Bad request: If request body is not in right format.

403

Forbidden: If the caller does not have the required rights.

404

Not found: If {userGroupId} does not exist.

409

Conflict: If {userGroupId} and {endpointGroupId} are already associated.

500

Internal Server Error: Exceptions thrown.

post /api/v4/userGroupToEndpointGroupAssignments/{endpointGroupId}
https://localhost:61366/api/v4/userGroupToEndpointGroupAssignments/{endpointGroupId}

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserGroupId": 1
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserGroupId": 1
}

Disassociates an User Group from a Endpoint Group

Role required: Tenant Administrator, or Endpoint Group Creator of a suitable User Group.

path Parameters
endpointGroupId
required
string

Endpoint Group ID. Hex string with 64 characters and without the 0x prefix.

userGroupId
required
integer <int32>

User Group ID.

Responses

204

Successful request, no content.

400

Bad request: If URI is not formatted right or If {endpointGroupId} and {userGroupId} are already associated.

403

Forbidden: If the caller does not have the required rights.

404

Not found: If {endpointGroupId} or {userGroupId} does not exist.

500

Internal Server Error: Exceptions thrown.

delete /api/v4/userGroupToEndpointGroupAssignments/{endpointGroupId}/userGroup/{userGroupId}
https://localhost:61366/api/v4/userGroupToEndpointGroupAssignments/{endpointGroupId}/userGroup/{userGroupId}

Users

Gets a collection of Users.

Role required: Global Administrator, Tenant Administrator, Account Manager, or Endpoint Group Creator.

Responses

200

Successful request, content returned

401

Unauthorized

500

Internal server error

get /api/v4/users
https://localhost:61366/api/v4/users

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Creates a User

Role required: Global Administrator, Tenant Administrator, or Account Manager.

TenantId is not required when a Global Administrator creates another Global Administrator.

If EMA installed in Windows Domain Authentication mode, the Username used for registering a new user must be its User Principle Name (UPN).

Username must be in an email address format.

Creating a 'Locked' user is not allowed. The 'Enabled' property should always be passed as 'true'

Password is required only when EMA is not installed in Windows Domain Authentication mode.

Password Requirements

--at least 8 characters
--contains at least one number
--contains both lowercase and uppercase alpha characters
--contains at least one special character
Request Body schema:
application/json

User object to be created

UserId
string <uuid>
Username
required
string
Enabled
required
boolean
TenantId
string <uuid>
Description
required
string
Password
string
RoleId
required
integer <int32>

Responses

200

Successful request, content returned

400

Bad request

401

Unauthorized

409

Conflict

500

Internal server error

post /api/v4/users
https://localhost:61366/api/v4/users

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserId": "00000000-0000-0000-0000-000000000000",
  • "Username": "string",
  • "Enabled": true,
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "Password": "string",
  • "RoleId": 0
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserId": "00000000-0000-0000-0000-000000000000",
  • "Username": "string",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "Enabled": true,
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "RoleId": 0,
  • "SysRole": "none"
}

Gets the details of a User by ID.

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User. Endpoint Group Users can see only their own information.

path Parameters
userId
required
string

User ID. Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Responses

200

Successful request, content returned

401

Unauthorized

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/users/{userId}
https://localhost:61366/api/v4/users/{userId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserId": "00000000-0000-0000-0000-000000000000",
  • "Username": "string",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "Enabled": true,
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "RoleId": 0,
  • "SysRole": "none"
}

Updates a User by ID.

Role required: Global Administrator, Tenant Administrator, or Account manager.

Only Description, RoleId, and Enabled can be updated, except for TenantId if converting a user from a Global Admin to a Tenant User. All other fields are ignored.

Manually locking a user by changing the 'Enabled' property to 'false' is not currently supported.

path Parameters
userId
required
string

User ID. Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Request Body schema:
application/json
UserId
required
string <uuid>
Username
string
CreatedOn
string <date-time>
CreatedBy
string <uuid>
ModifiedOn
string <date-time>
ModifiedBy
string <uuid>
Enabled
required
boolean
TenantId
string <uuid>
Description
required
string
RoleId
required
integer <int32>
SysRole
string
Enum: "none" "globalAdministrator" "tenantAdministrator" "accountManager" "endpointGroupsCreator" "endpointGroupsUser"

Responses

200

Successful request, content returned

400

Bad request

401

Unauthorized

403

Forbidden

404

Not found

500

Internal server error

put /api/v4/users/{userId}
https://localhost:61366/api/v4/users/{userId}

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserId": "00000000-0000-0000-0000-000000000000",
  • "Username": "string",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "Enabled": true,
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "RoleId": 0,
  • "SysRole": "none"
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserId": "00000000-0000-0000-0000-000000000000",
  • "Username": "string",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "Enabled": true,
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "RoleId": 0,
  • "SysRole": "none"
}

Deletes a User by ID.

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User

All users can delete their own accounts. Global Administrators can delete any user account from any Tenant. Tenant Administrators can delete any user account from the same Tenant. Account Managers can delete any user having the primary role of Account Manager, Endpoint Group Creator, or Endpoint Group User from the same Tenant.

path Parameters
userId
required
string

Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Responses

204

Successful request, no content

400

Bad request

401

Unauthorized

403

Forbidden

404

Not found

500

Internal server error

delete /api/v4/users/{userId}
https://localhost:61366/api/v4/users/{userId}

Gets the details of a User by username.

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User. Endpoint Group Users can see only their own information.

query Parameters
username
required
string

Responses

200

Successful request, content returned

400

Bad request

401

Unauthorized

403

Forbidden

404

Not found

500

Internal server error

get /api/v4/users/getUserByName
https://localhost:61366/api/v4/users/getUserByName

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "UserId": "00000000-0000-0000-0000-000000000000",
  • "Username": "string",
  • "CreatedOn": "2021-02-12T17:57:26Z",
  • "CreatedBy": "00000000-0000-0000-0000-000000000000",
  • "ModifiedOn": "2021-02-12T17:57:26Z",
  • "ModifiedBy": "00000000-0000-0000-0000-000000000000",
  • "Enabled": true,
  • "TenantId": "00000000-0000-0000-0000-000000000000",
  • "Description": "string",
  • "RoleId": 0,
  • "SysRole": "none"
}

Set a User's password.

Role required: Global Administrator, Tenant Administrator, Account Manager, Endpoint Group Creator, or Endpoint Group User.

Global Administrators can reset the passwords of all Users without providing their current passwords. Tenant Administrators can reset the passwords of Users in the same Tenant without providing their current passwords. All other users need to provide their current passwords to reset them.

Password is required only when EMA is not installed in Windows Domain Authentication mode.

Password Requirements

--at least 8 characters
--contains at least one number
--contains both lowercase and uppercase alpha characters
--contains at least one special character
path Parameters
userId
required
string

User ID. Canonical GUID form: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

Request Body schema:
application/json
CurrentPassword
string
NewPassword
required
string .*(?=^.{8,255}$)(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[&"'(\-_)=~#{[|`\\^@\]}^$*¨£µ%,;:!?./§+]).*

Responses

204

Successful request, no content

400

Bad request

401

Unauthorized

403

Forbidden

404

Not found

500

Internal server error

post /api/v4/users/{userId}/resetPassword
https://localhost:61366/api/v4/users/{userId}/resetPassword

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "CurrentPassword": "string",
  • "NewPassword": "string"
}

WifiSetups

Gets a collection of WifiSetups.

Role required: Tenant Administrator, Endpoint Group Creator, or Endpoint Group User

Responses

200

Successful request

500

Internal Server Error

get /api/v4/wifiSetups
https://localhost:61366/api/v4/wifiSetups

Response samples

Content type
application/json
Copy
 Expand all Collapse all
[
  • {
    }
]

Creates a WifiSetup to be used by AMT Profiles.

Role required: Tenant Administrator

When the KeyManagementProtocol is WPAPSK or WPA2PSK, Passphrase is required, and _802_1_SetupLookupKey is not needed and will be set to null. When the KeyManagementProtocol is WPAIEEE802_1 or WPA2IEEE802_1, _802_1_SetupLookupKey is required, and Passphrase is not needed and will be set to nul.

Request Body schema:
application/json

WifiSetup object to create

SetupName
required
string
Priority
required
integer <int32>
SSID
required
string
EncryptionAlgorithm
required
string
Enum: "tKIP" "cCMP"
KeyManagementProtocol
required
string
Enum: "wPAPSK" "wPAIEEE802_1" "wPA2PSK" "wPA2IEEE802_1"
Passphrase
string
TenantId
string
_802_1_SetupLookupKey
integer <int32>

Responses

200

Successful request

400

Invalid ModelState

409

WifiSetup name already exists

500

Internal Server Error

post /api/v4/wifiSetups
https://localhost:61366/api/v4/wifiSetups

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "SetupName": "string",
  • "Priority": 0,
  • "SSID": "string",
  • "EncryptionAlgorithm": "tKIP",
  • "KeyManagementProtocol": "wPAPSK",
  • "Passphrase": "string",
  • "TenantId": "string",
  • "_802_1_SetupLookupKey": 0
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "WifiSetupId": 0,
  • "SetupName": "string",
  • "Priority": 0,
  • "SSID": "string",
  • "EncryptionAlgorithm": "tKIP",
  • "KeyManagementProtocol": "wPAPSK",
  • "Passphrase": "string",
  • "TenantId": "string",
  • "_802_1_SetupLookupKey": 0
}

Gets a WiFiSetup by ID.

Role required: Tenant Administrator, Endpoint Group Creator, or Endpoint Group User

path Parameters
wifiSetupId
required
integer <int32>

WifiSetup ID

Responses

200

Successful request, content returned

404

Not found

500

Internal Server Error

get /api/v4/wifiSetups/{wifiSetupId}
https://localhost:61366/api/v4/wifiSetups/{wifiSetupId}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "WifiSetupId": 0,
  • "SetupName": "string",
  • "Priority": 0,
  • "SSID": "string",
  • "EncryptionAlgorithm": "tKIP",
  • "KeyManagementProtocol": "wPAPSK",
  • "Passphrase": "string",
  • "TenantId": "string",
  • "_802_1_SetupLookupKey": 0
}

Updates a WiFiSetup by ID.

Role required: Tenant Administrator

When the KeyManagementProtocol is WPAPSK or WPA2PSK and the original KeyManagementProtocol is WPAPSK or WPA2PSK, Passphrase is optional, and _802_1_SetupLookupKey is not needed and will be set to null internally. If Passphrase is not provided or empty, the original Passphrase will be used. When the KeyManagementProtocol is WPAPSK or WPA2PSK and the original KeyManagementProtocol is WPAIEEE802_1 or WPA2IEEE802_1, Passphrase is required, and _802_1_SetupLookupKey is not needed and will be set to null internally. When the KeyManagementProtocol is WPAIEEE802_1 or WPA2IEEE802_1, _802_1_SetupLookupKey is required, and Passphrase is not needed and will be set to null internally.

path Parameters
wifiSetupId
required
integer <int32>

WifiSetup ID

Request Body schema:
application/json

WifiSetup object to update

WifiSetupId
required
integer <int32>
SetupName
required
string
Priority
required
integer <int32>
SSID
required
string
EncryptionAlgorithm
required
string
Enum: "tKIP" "cCMP"
KeyManagementProtocol
required
string
Enum: "wPAPSK" "wPAIEEE802_1" "wPA2PSK" "wPA2IEEE802_1"
Passphrase
string
TenantId
string
_802_1_SetupLookupKey
integer <int32>

Responses

200

Returns updated WifiSetup

400

Bad request

404

Not found

409

WifiSetup name already exists

500

Internal Server Error

put /api/v4/wifiSetups/{wifiSetupId}
https://localhost:61366/api/v4/wifiSetups/{wifiSetupId}

Request samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "WifiSetupId": 0,
  • "SetupName": "string",
  • "Priority": 0,
  • "SSID": "string",
  • "EncryptionAlgorithm": "tKIP",
  • "KeyManagementProtocol": "wPAPSK",
  • "Passphrase": "string",
  • "TenantId": "string",
  • "_802_1_SetupLookupKey": 0
}

Response samples

Content type
application/json
Copy
 Expand all Collapse all
{
  • "WifiSetupId": 0,
  • "SetupName": "string",
  • "Priority": 0,
  • "SSID": "string",
  • "EncryptionAlgorithm": "tKIP",
  • "KeyManagementProtocol": "wPAPSK",
  • "Passphrase": "string",
  • "TenantId": "string",
  • "_802_1_SetupLookupKey": 0
}

Deletes a WiFiSetup by ID.

Role required: Tenant Administrator

path Parameters
wifiSetupId
required
integer <int32>

WifiSetup ID

Responses

204

Successful request, no content

404

Not found

409

Cannot delete Wifisetup if it is still associated with AMT Profile

500

Internal Server Error

delete /api/v4/wifiSetups/{wifiSetupId}
https://localhost:61366/api/v4/wifiSetups/{wifiSetupId}