Get Your API Key

To generate an API key, make a GET or POST request to the firewall’s hostname or IP addresses using the administrative credentials and
type=keygen
:
curl -k -X GET 'https://<firewall>/api/?type=keygen&user=<username>&password=<password>'
or
curl -k -X POST 'https://<firewall>/api/?type=keygen&user=<username>&password=<password>'
A successful API call returns
status="success"
along with the API key within the
key
element:
<response status="success"> 



<result> 



<key>gJlQWE56987nBxIqyfa62sZeRtYuIo2BgzEA9UOnlZBhU==</key> 



</result> 



</response> 
(
Optional
) Revoke API keys.
You can revoke all currently valid API keys, in the event one or more keys are compromised. To change an API key associated with an administrator account change the password associated with the administrator account. API keys that were generated before you expired all keys, or a key that was created using the previous credentials will no longer be valid.
If you use Panorama to manage your firewalls, Panorama and all of the firewalls that it manages must have the same master key.