Keyfactor API Reference

The Keyfactor Command solution exposes a REST-based APIClosed An API is a set of functions to allow creation of applications. Keyfactor offers the Keyfactor API, which allows third-party software to integrate with the advanced certificate enrollment and management features of Keyfactor Command. that enables third-party systems and automation tools to integrate with Keyfactor Command’s certificate lifecycle management capabilities in a secure, programmatic manner. The API supports common enrollmentClosed Certificate enrollment refers to the process by which a user requests a digital certificate. The user must submit the request to a certificate authority (CA)., discovery, management, and reporting operations, allowing organizations to automate routine or large-scale tasks that would otherwise require interaction through the Management Portal.

The API complements the web-based components of Keyfactor Command by providing HTTP endpoints that expose equivalent and extended functionality, accessible to any system capable of making authenticated web requests. These APIs are designed to support long-term integrations while evolving to expose additional platform capabilities over time.

The Keyfactor API is designed with the following goals:

  • Provide a consistent, well-structured interface to simplify integration.

  • Support interoperability across platforms, frameworks, and operating systems.

  • Enable automation of certificate enrollment and lifecycle management workflows.

  • Deliver a secure, role-based interface suitable for production environments.

  • Preserve backward compatibility where possible to protect existing integrations.

Important:  The Classic API, also known as the CMS API, was removed in Keyfactor Command version 11. All uses of the Classic API should be migrated to the Keyfactor API prior to upgrading to Keyfactor Command version 11 or later.