Allocation6

Audit2

BMC Credential1

BMC Reset1

Credential Rotation2

DPU Extension Service7

DPU Machine2

DPU Reprovision1

Expected Machine7

Expected Power Shelf5

Expected Rack7

Expected Switch5

Health Report3

Host Firmware Config2

InfiniBand Partition6

Infrastructure Provider2

Instance10

Instance Type8

IP Block6

iPXE Template2

Machine12

Machine Validation3

Measured Boot Trusted Machine3

Measured Boot Trusted Profile3

Metadata1

Network Security Group5

NVLink Domain4

NVLink Logical Partition6

Operating System5

Rack11

Rule5

Service Account1

Site6

Site Explorer2

SKU5

SSH Key5

SSH Key Group5

Subnet5

Task3

Task Run8

Tenant3

Tenant Account5

Tenant Identity9

Tray9

UEFI Credential1

User1

VPC6

VPC Peering4

VPC Prefix5

Credential Rotation

Get Credential Rotation Status

Report convergence of an in-flight or completed site-wide credential rotation. When deviceMac is set, the counts describe just that device and a per-device detail block is returned. Equivalent to nico-admin-cli credential rotation-status.

User must have authorization role with PROVIDER_ADMIN suffix.

get/v2/org/{org}/nico/credential/rotation

Query parameters

siteIdstring uuid required

ID of the Site to query.

credentialType'BMC' | 'HostUEFI' | 'DPUUEFI' | 'NVOS' | 'LockdownIKM' required

Credential family to report.

deviceMacstring

Report only this device's convergence, matched by MAC.

Response

Credential rotation status

targetVersioninteger required

Current site-wide target version for this family.

convergedinteger required

Number of devices at or beyond the target version.

pendinginteger required

Number of devices not yet converged and eligible to rotate.

quarantinedinteger required

Number of devices currently in a rotation backoff window.

quarantinedDeviceMacsstring[] nullable

MAC addresses of the quarantined devices.

startedstring date-time nullable

When the current target version was staged.

completeboolean required

True only when every device in the queried set has reached the target with none pending and none quarantined.

Changes

Changed in 2 of the 93 revisions of this API.71

Aug 19, 2026484497856a947See the full diff
- ▲
  the converged response's property type/format changed from integer/int64 to integer/uint64 for status 200
  response-property-type-changed
- ▲
  the device/currentVersion response's property type/format changed from integer null/int64 to integer null/uint32 for status 200
  response-property-type-changed
- ▲
  the device/rotateAttempts response's property type/format changed from integer/int64 to integer/uint32 for status 200
  response-property-type-changed
- ▲
  the device/rotatingToVersion response's property type/format changed from integer null/int64 to integer null/uint32 for status 200
  response-property-type-changed
- ▲
  the pending response's property type/format changed from integer/int64 to integer/uint64 for status 200
  response-property-type-changed
- ▲
  the quarantined response's property type/format changed from integer/int64 to integer/uint64 for status 200
  response-property-type-changed
- ▲
  the targetVersion response's property type/format changed from integer/int64 to integer/uint32 for status 200
  response-property-type-changed
Jul 29, 202645aed597123d1See the full diff
- ○
  endpoint added
  endpoint-added

Full history