Connecting to MECM API Using Certificate Authentication

Question

Hello everyone,
I'm writting a API to connecting MECM 2403 using python and have a question about the process I'm using. Currently, I establish a connection with the server using certificates. After that, I send a separate request using a requests session with NTLM authentication to access the MECM API and pull endpoint data. My question is: Is this two-step process necessary? Can I access the API directly using just certificate-based authentication, or is it required to establish the initial connection with the certificate and then send a separate request using RBAC?

Thank you for your assistance!

Answer 1

Hi,

When connecting to the MECM API, you can indeed use certificate-based authentication directly without needing to follow up with NTLM authentication.

Here are some steps to get you started:

Direct Query via Web Browser:

• You can use a web browser to query the administration service. Simply specify the query URI as the browser's URL, and the service will process the GET request, returning the result in JSON format.

How to set up the administration service in Configuration Manager

Using PowerShell:

• You can make direct calls to the service using the Invoke-RestMethod cmdlet in PowerShell. For example:

Invoke-RestMethod -Method 'Get' -Uri "https://<SMSProviderFQDN>/AdminService/wmi/SMS_Site" -UseDefaultCredentials

• This command will return the output in JSON format. You can further drill down to specific values as needed.

Power BI Desktop:

• You can also use Power BI Desktop to query data in Configuration Manager via the administration service. In Power BI Desktop, select Get Data > OData feed, and specify the administration service route.

For more detailed information, you can refer to the Configuration Manager API reference.

Answer 2

Hi,

To connect Configuration Manager, you can try wbem service. The code snippets are in this article

Calling Code Snippets - Configuration Manager | Microsoft Learn

Regards,

Alex