Active Directory
A set of directory-based technologies included in Windows Server.
6,711 questions
Key provisioning using [MS-KPP]: Key Provisioning Protocol
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
I am trying to find an official specification to enroll NGC Keys into AD and Azure AD.
Is this the right specification to follow for provisioning keys in Hybrid Azure AD Environment?
Is the provisioning server mentioned in this documents part of Azure AD Connect?
I appreciate any insight into this.
{count} votes
-
Anonymous
2021-08-12T16:18:12.44+00:00 @AmanpreetSingh-MSFT or @Andy David - MVP
I
I appreciate your response to this question. -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 60%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDM%3C/text%3E%3C/svg%3E)
David Mulder 0 Reputation points2024-03-04T18:01:09.6666667+00:00 I tried adding an NGC key for Azure AD, and the MS-KPP protocol spec does appear to be correct. You can discover the correct endpoint for key enrollment by calling GET https://enterpriseregistration.windows.net/{tenant_id}/Discover?api-version=1.9
You need to set the headers Bearer (to your access token), ocp-adrs-client-name (to some client name), and ocp-adrs-client-version (the client version). The KeyProvisioningService is what you're looking for in the response. The resource_id in that KeyProvisioningService is the resource you'll need to request via MSAL when getting an access token for this service.
Sign in to comment
Sign in to answer