The domain (e.g., api.private.com) depends on what ZSDK cloud you are on. To learn more, see What Is My Cloud Name for ZSDK?

The provisioning key is a text string that is generated when you add a new App Connector. When deploying an App Connector, you are prompted to enter this key. The provisioning key functions as an ID for the App Connector, enabling the ZSDK cloud to verify the App Connector's authenticity and complete the deployment process. Furthermore, each key is associated with a specific App Connector group, so the key allows ZSDK to identify the App Connector group to which an App Connector must be deployed.

Provisioning keys are designed to enable auto-scaling so that you can easily deploy additional App Connectors and respond optimally to increases in required capacity. When you generate a provisioning key, you can specify the number of times a key can be used to deploy App Connectors. ZSDK tracks the number of times a key is used to deploy an App Connector and displays that number on the App Connector Provisioning Keys page. When a key is used the maximum number of times, you cannot use it to deploy more App Connectors. However, you can always edit the maximum number of times a key can be used. You also have the option of associating multiple provisioning keys to a single App Connector group.

About the App Connector Provisioning Keys Page

On the App Connector Provisioning Keys page (Configuration & Control > Private Infrastructure > App Connector Management > App Connector Provisioning Keys), you can do the following:

1. Expand all or one of the rows in the table to see the signing certificate of each provisioning key. The signing certificate is the enrollment certificate for the provisioning key.
2. Filter the information that appears in the table. By default, no filters are applied.
3. View a list of all the provisioning keys. For each key, you can see:
   • Name: The name of the key.
   • Maximum # of App Connectors: The maximum number of App Connectors that can be deployed using the key.
   • Provisioning Key Utilization Count: The number of times the provisioning key has been used.
   • App Connector Group: The App Connector group associated with the key.
   • Provisioning Key: The key needed for deploying an App Connector.
4. Copy the provisioning key. When copying the key, consider the following:
   • Provisioning Key Utilization Count Reached

     If the provisioning key utilization count is reached, you cannot copy the key. A Warning icon appears next to a disabled Copy icon. You can edit the key to raise the limit.

     

     Close
   • Incorrect Copy

     When a provisioning key is incorrectly copied, the following error appears on your App Connector console when it tries to enroll:

     notice:Checking Enrollment
     notice:No valid certificate. Attempting to enroll
     notice:Enroll: Connecting to api.private.zscaler.com via co2br.prod.zpath.net.
     error:Login request failed - http status(401) nonce(<3|api.private.zscaler.com|0/Z6lDT...>) fingerprint(<oXaN4RRiMc...>)
     notice:Certificate enrollment failed. 

     Close
5. Edit the provisioning key.
6. Delete the provisioning key.
7. Download the provisioning key.
8. Go to the App Connectors or App Connector Groups pages.