Authentication

Using API keys to authenticate and authorize API requests

The IWO API require access using an API key. The API key authenticates and authorizes API requests sent by a client using the HTTP signature scheme. API keys can be used by unattended, daemon clients that need to send requests to Intersight programmatically.

The API key is generated using the Intersight GUI interface, and entered into the script described in the Getting Started section. Only authorized accounts with the Account administrator role privilege can generate the keys and execute IWO API.

API keys are based on public key cryptography:

• An API key is composed of a keyId and keySecret. The API client uses the API key to cryptographically sign each HTTP request sent to Intersight.
• The signature parameter is a digital signature of the HTTP headers and body.
• For more Information see API Authorization Schemes and Generating API keys.