Devices

Enroll a headless installation

Approves and redeems a headless enrollment in one request for an API-key or OAuth principal: the same approval as POST .../devices/enrollment-tickets, redeemed at once with its PKCE verifier and the Device's registration and P-256 public key. The Device then authenticates on the signed Device transport. Execution feature gates can return 503.

<sub>Scope: devices:write</sub>

post/v3/organizations/{orgId}/devices/enrollments

Request

  • Base URL: https://api.reasonmachines.com
  • URL: https://api.reasonmachines.com/v3/organizations/{orgId}/devices/enrollments
  • Auth: HTTP bearer

Request body

code_verifierstring required

PKCE verifier of the approval's code_challenge.

registrationobject required

The Device's registration as the signed Device transport's enroll takes it (name, os, architecture, versions, protocol_version, capabilities, roots, device_public_key), without enrollment_ticket and code_verifier. device_public_key is required.

Response

The installation's existing Device enrolled again.

device_idstring uuid required
organization_idstring required
auth_scheme'p256' required
protocol_versioninteger required

Changes

No recorded changes to this operation across all 1 revision of this API.