Add a new SCEP payload configuration to an existing profile

To create Mac SCEP policy

Endpoints

post /api/v1/mdm/profiles/{profile_id}/payloads/macsceppolicy

Copy full URL

Request URL

https://{server-hostname}:8383/api/v1/mdm/profiles/{profile_id}/payloads/macsceppolicy

Scope

MDMDeviceMgmt.CREATECopied!

Header

Authorization: d92d4xxxxxxxxxxxxx15f52

Request Parameters

- Request Headers

Content-TypestringMandatory

application/jsonCopied!

AcceptstringMandatory

application/jsonCopied!

- Path Parameters

profile_idstringMandatory

Unique identifier of the profile. Obtain from the Create Profile or Get Profiles response

- Request Body

application/json

JSON Object

Hide Sub-Attributes

scep_config_idlongMandatory

SCEP template configuration ID. First create a SCEP server using Add SCEP Server, then create a template using Add SCEP Template to obtain this ID

key_is_extractablebooleanOptional

Whether the private key can be extracted from the keychain. When false, the key is non-exportable for enhanced security. Default: true

allow_all_apps_accessbooleanOptional

Whether all apps on the device can access the SCEP certificate and private key in the keychain. Default: false

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request POST \
  --url https://appdomain/api/v1/mdm/profiles/{profile_id}/payloads/macsceppolicy \
  --header 'Accept: application/json' \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52' \
  --header 'Content-Type: application/json' \
  --data '{"allow_all_apps_access":false,"scep_config_id":1,"key_is_extractable":true}'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomain/api/v1/mdm/profiles/{profile_id}/payloads/macsceppolicy"))
        .header("Content-Type", "application/json")
        .header("Accept", "application/json")
        .header("Authorization", " d92d4xxxxxxxxxxxxx15f52")
        .method("POST", HttpRequest.BodyPublishers.ofString("{\"allow_all_apps_access\":false,\"scep_config_id\":1,\"key_is_extractable\":true}"))
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomain")

payload = "{\"allow_all_apps_access\":false,\"scep_config_id\":1,\"key_is_extractable\":true}"

headers = {
    'Content-Type': "application/json",
    'Accept': "application/json",
    'Authorization': " d92d4xxxxxxxxxxxxx15f52"
    }

conn.request("POST", "/api/v1/mdm/profiles/{profile_id}/payloads/macsceppolicy", payload, headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Content-Type", "application/json");
    headersMap.put("Accept", "application/json");

    data=Map();
    data.put("scep_config_id","1");
    data.put("key_is_extractable",true);
    data.put("allow_all_apps_access",true);

    response = invokeUrl
    [
        url: "https://appDomain/api/v1/mdm/profiles/{profile_id}/payloads/macsceppolicy"
        type: POST
        headers: headersMap
        body: data
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Content-Type", "application/json")
$headers.Add("Accept", "application/json")
$headers.Add("Authorization", " d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomain/api/v1/mdm/profiles/{profile_id}/payloads/macsceppolicy' -Method POST -Headers $headers -ContentType 'application/json' -Body '{"allow_all_apps_access":false,"scep_config_id":1,"key_is_extractable":true}'

Sample Request Body

Add SCEP payload to the profile

Copied!

  {
    "allow_all_apps_access": false,
    "scep_config_id": 1,
    "key_is_extractable": true
  }

▼ Show full

Response Parameters

- HTTP code 200

Response Body - application/json

JSON Object

Hide Sub-Attributes

payload_idlong

Unique identifier for the created payload item

scep_config_idstring

SCEP template configuration ID. First create a SCEP server using Add SCEP Server, then create a template using Add SCEP Template to obtain this ID

key_is_extractableboolean

Whether the private key can be extracted from the keychain. When false, the key is non-exportable for enhanced security. Default: true

allow_all_apps_accessboolean

Whether all apps on the device can access the SCEP certificate and private key in the keychain. Default: false

Possible Response Codes

200HTTP code

Sample Response: HTTP 200

SCEP payload successfully added

Copied!

  {
    "payload_id": 9007199254741000,
    "allow_all_apps_access": false,
    "scep_config_id": 1,
    "key_is_extractable": true
  }

▼ Show full

Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.