{"id":93343,"date":"2023-07-07T10:31:45","date_gmt":"2023-07-07T14:31:45","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&p=93343"},"modified":"2024-09-10T19:43:01","modified_gmt":"2024-09-10T23:43:01","slug":"rotate-the-ad-import-api-key","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key","title":{"rendered":"Rotate the Active Directory Import (ADI) API Key"},"content":{"rendered":"\n

If the API key associated with the JumpCloud administrator account used to configure the JumpCloud Active Directory Integration (ADI) AD Import agent is rotated, or the admin account used to configure ADI is deleted, the AD Import service will stop working. As a result, password changes, new user imports, and user updates from AD to JumpCloud will fail.<\/p>\n\n\n\n

<\/p><\/div>

Warning:<\/strong> \n

Your organization will not receive any sort of communication or error about the breakage.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

Read this article to learn how to verify the status of AD Import agents in JumpCloud and update the API Key on impacted AD servers.<\/p>\n\n\n\n

Verifying AD Import Agent Status<\/strong><\/h2>\n\n\n\n
    \n
  1. Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
  2. Navigate to DIRECTORY INTEGRATIONS <\/strong>> Active Directory <\/strong>> select your Domain > Domain Agents<\/strong> tab.<\/li>\n\n\n\n
  3. In the Agent Version<\/strong> column, if Import<\/strong> is listed with a red \u201c!<\/strong>\u201d, the import agent is broken and the API key needs to be updated.<\/li>\n<\/ol>\n\n\n\n
    \"\"<\/figure>\n\n\n\n

    Updating the API Key<\/strong><\/h2>\n\n\n\n

    Overview<\/strong><\/h3>\n\n\n\n

    The following is a high level overview of the steps required to replace the API key for AD Import:<\/p>\n\n\n\n

      \n
    1. Log in to the JumpCloud Admin Portal<\/a> and view the Import agent(s) within Domain Agents<\/strong> tab. <\/li>\n\n\n\n
    2. Identify each broken connector.<\/li>\n\n\n\n
    3. Retrieve the API key you stored for the ADI admin account. <\/li>\n<\/ol>\n\n\n\n

      <\/p><\/div>

      Note:<\/strong> \n

      We recommend using a dedicated administrator account specific to ADI.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

        \n
      1. On each impacted AD server:\n
          \n
        1. Log in to the server with a local admin or AD domain admin account.<\/li>\n\n\n\n
        2. Replace the default value for HKLM\\SOFTWARE\\JumpCloud\\AD Integration Import Agent\\api_key in the registry.<\/li>\n\n\n\n
        3. Restart the JumpCloud AD Integration Import Agent service.<\/li>\n<\/ol>\n<\/li>\n\n\n\n
        4. In the JumpCloud Admin Portal, view the Import agents(s) within the Domain Agents<\/strong> tab and verify they are active.<\/li>\n<\/ol>\n\n\n\n

          To update the API Key on an AD server <\/strong><\/h3>\n\n\n\n
            \n
          1. Generate a new API key<\/a> if the JumpCloud admin account you are using for ADI does not have an API key or the generated API key was not stored. <\/li>\n<\/ol>\n\n\n\n

            <\/p><\/div>

            Important:<\/strong> \n

            Store the API key in a secure location, like the JumpCloud Password Manager<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

              \n
            1. Log in to the AD server as a local administrator or AD domain administrator. <\/li>\n<\/ol>\n\n\n\n

              <\/p><\/div>

              Tip:<\/strong> \n

              The server can be identified by referencing the Host Name<\/strong> in the JumpCloud Admin Portal.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n

                \n
              1. Open the registry.<\/li>\n\n\n\n
              2. Navigate to HKLM\\SOFTWARE\\JumpCloud\\AD Integration Import Agent\\api_key<\/strong>.<\/li>\n\n\n\n
              3. Edit Default.<\/li>\n<\/ol>\n\n\n\n
                \"\"<\/figure>\n\n\n\n
                  \n
                1. Enter the API key in the Value data field, replacing the existing hashed value.<\/li>\n\n\n\n
                2. Click OK<\/strong>.<\/li>\n\n\n\n
                3. Open services.msc and restart the JumpCloud AD Integration Import Agent service.<\/li>\n\n\n\n
                4. Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
                5. Navigate to DIRECTORY INTEGRATIONS <\/strong>> Active Directory <\/strong>> select your Domain > Domain Agents<\/strong>.<\/li>\n\n\n\n
                6. Verify the Import agent has a green check mark “\u2705” indicating it is active.<\/li>\n<\/ol>\n\n\n\n
                  \"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

                  If the API key associated with the JumpCloud administrator account used to configure the JumpCloud Active Directory Integration (ADI) AD […]<\/p>\n","protected":false},"author":218,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2904,2855,2954],"support_tag":[],"coauthors":[3011],"acf":[],"yoast_head":"\nRotate the Active Directory Import (ADI) API Key - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to manually update the configuration for the AD Import agent after the API key used during initial configuration is rotated.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Rotate the Active Directory Import (ADI) API Key\" \/>\n<meta property=\"og:description\" content=\"Learn how to manually update the configuration for the AD Import agent after the API key used during initial configuration is rotated.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-09-10T23:43:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/07\/Broken-ADI-Import-Agent-1024x204.jpg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key\",\"url\":\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key\",\"name\":\"Rotate the Active Directory Import (ADI) API Key - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/07\/Broken-ADI-Import-Agent-1024x204.jpg\",\"datePublished\":\"2023-07-07T14:31:45+00:00\",\"dateModified\":\"2024-09-10T23:43:01+00:00\",\"description\":\"Learn how to manually update the configuration for the AD Import agent after the API key used during initial configuration is rotated.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/07\/Broken-ADI-Import-Agent.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/07\/Broken-ADI-Import-Agent.jpg\",\"width\":1604,\"height\":319},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Rotate the Active Directory Import (ADI) API Key\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Rotate the Active Directory Import (ADI) API Key - JumpCloud","description":"Learn how to manually update the configuration for the AD Import agent after the API key used during initial configuration is rotated.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key","og_locale":"en_US","og_type":"article","og_title":"Rotate the Active Directory Import (ADI) API Key","og_description":"Learn how to manually update the configuration for the AD Import agent after the API key used during initial configuration is rotated.","og_url":"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key","og_site_name":"JumpCloud","article_modified_time":"2024-09-10T23:43:01+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/07\/Broken-ADI-Import-Agent-1024x204.jpg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes","Written by":"nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key","url":"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key","name":"Rotate the Active Directory Import (ADI) API Key - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/07\/Broken-ADI-Import-Agent-1024x204.jpg","datePublished":"2023-07-07T14:31:45+00:00","dateModified":"2024-09-10T23:43:01+00:00","description":"Learn how to manually update the configuration for the AD Import agent after the API key used during initial configuration is rotated.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/07\/Broken-ADI-Import-Agent.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/07\/Broken-ADI-Import-Agent.jpg","width":1604,"height":319},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/rotate-the-ad-import-api-key#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Rotate the Active Directory Import (ADI) API Key"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/93343"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/218"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/93343\/revisions"}],"predecessor-version":[{"id":115455,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/93343\/revisions\/115455"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=93343"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=93343"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=93343"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=93343"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}