---
title: "List JSON Web Keys associated with enrollment"
method: GET
path: "/enroll/jwks"
tags: ["Enroll"]
---

# List JSON Web Keys associated with enrollment

`GET /enroll/jwks`

## Request

- Base URL: `https://demo.ziti.dev/edge/client/v1`
- URL: `https://demo.ziti.dev/edge/client/v1/enroll/jwks`
- Auth: none declared
- TypeScript: <https://skmtc.dev/openziti/apis/ziti-edge-client/docs/enroll/jwks/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns a list of JSON Web Keys (JWKS) that are used for enrollment signing. The keys listed here are used
to sign and co-sign enrollment JWTs. They can be verified through a challenge endpoint, using the public keys
from this endpoint to verify the target machine has possession of the related private key.

## Response `200`

A JWKS response for enrollment.

- Jwks
  - `keys` Jwk[]
    - `alg` string: Algorithm intended for use with the key.
    - `crv` string: Curve for ECC Public Keys.
    - `d` string: ECC Private Key or RSA Private Exponent.
    - `dp` string: First Factor CRT Exponent for RSA.
    - `dq` string: Second Factor CRT Exponent for RSA.
    - `e` string: Exponent for RSA Public Key.
    - `key_ops` string[]: Intended key operations, e.g., sign, verify.
    - `kid` string: Key ID.
    - `kty` string, required: Key Type.
    - `n` string: Modulus for RSA Public Key.
    - `oth` OtherPrime[]: Other Primes Info not represented by the first two primes.
      - `d` string: Factor CRT exponent.
      - `r` string: Prime factor.
      - `t` string: Factor CRT coefficient.
    - `p` string: First Prime Factor for RSA.
    - `q` string: Second Prime Factor for RSA.
    - `qi` string: First CRT Coefficient for RSA.
    - `use` string: Public key use, e.g., sig (signature) or enc (encryption).
    - `x` string: X Coordinate for ECC Public Keys.
    - `x5c` string[]: X.509 Certificate Chain.
    - `x5t` string: X.509 Certificate SHA-1 Thumbprint.
    - `x5t#S256` string: X.509 Certificate SHA-256 Thumbprint.
    - `x5u` string: X.509 URL.
    - `y` string: Y Coordinate for ECC Public Keys.

## Changes

- **2024-06-07** `26670d8bbc37`: 1 info
  - endpoint added
- **2024-05-29** `cce2800c1357`: 1 breaking
  - api path removed without deprecation

[Operation history](https://skmtc.dev/openziti/apis/ziti-edge-client/changes/enroll/jwks/get.md)

---

[API](https://skmtc.dev/openziti/apis/ziti-edge-client.md) - [All operations](https://skmtc.dev/openziti/apis/ziti-edge-client/llms.txt) - [OpenAPI document](https://skmtc.dev/openziti/apis/ziti-edge-client/revisions/f7b51eaafbbb?raw)