An API key is required for authenticating with the Zscaler Posture Control (ZPC) API in order to make API calls. You can create a maximum of 100 API keys.

To add a new API key:

1. Go to Administration > Authentication & Authorization > API Keys.
2. Click Create API Key.

The Create API Key window appears.

3. In the Create API Key window:

• Name: Enter a name for the key. The name is displayed in the audit logs as the entity performing the API actions. Symbols like ampersands (&) and asterisks (*) are not supported.
• Role Groups: Select the group and role from the drop-down menu for role-based access.

Zscaler recommends creating an API key with the least permissive role.

• Revocation Date: Select a date from the drop-down menu that the API key is revoked. You can set the Revocation date to Never, 7 Days, 15 Days, 1 Month, or 3 Months. Revoked API keys no longer allow access to authenticate to the ZPC API, but remain in the table. By default, this is set to 7 Days.

4. Click Save. The API key is displayed.
5. Click the View icon to view the API key, click the Copy icon to copy the API key to your Clipboard, or click the Download icon to download the API key as a CSV file. You need it for authentication.

The API key is only available when creating an API key. It is not available to access in the ZPC Admin Portal after you close the window, so store it in a secure location.

6. Close the window.