4.1 Provision a Key

The following example shows a request to the key provisioning server to provision a key (section 3.1.5.1.1.1) and the response (section 3.1.5.1.1.2).

Request:

 POST https://www.contoso.com/EnrollmentServer/key/?api-version=1.0 HTTP/1.1
 Accept: application/json
 Authorization: Bearer eyJEZXZpY2VJRCI6IjNhNWY0NzQzLWQ0NTItNDQ2YS05NWY2LTRkYjFhNTZiOTJjYSIsInVwbiI6InVzZXJAY29udG9zby5jb20ifQ==
 return-client-request-id: true
 client-Request-Id: 006dd572-ca07-42ae-8472-01a00b045bb8
 {
     "kngc":"VGhpc0lzQW5FeGFtcGxlQXN5bW1ldHJpY0tleQ=="
 }

Response:

 HTTP/1.1 200 OK
 Content-Type: application/json
 client-request-id: 006dd572-ca07-42ae-8472-01a00b045bb8
 request-id: 650206f2-9a02-447d-9347-0cb7b4fee827
  
 {
     "kid":"0ce67455-8ea1-4523-be5f-bfd09190fad6",
     "upn":"user@contoso.com",
     "pctx":"eyJEZXZpY2VJRCI6IjNhNWY0NzQzLWQ0NTIt=="
 }