A set of API functions allows you to manage cards (tokens, smart cards) by means of client applications.
Usage
Access to API functions is implemented through the icmapi web application, which is part of the Indeed Certificate Manager server. To interact with Indeed CM through the API, in the Roles section of the Indeed CM configuration, you will need to create a service role, include the account on whose behalf the API will be accessed, and define privileges for the role:
Finding users
Viewing card repository
Enabling card
Disabling card
Updating card
Revoking card
1. GetCards - get the list of user's cards.
Request type:
GET
Parameter:
name - username in UPN format (user principal name)
2. GetAllCards - get the list of cards added to the system.
Request type:
GET
Parameters:
without parameters
offset - shift by the specified number of cards
count - number of output cards
Return values(CardInfo object list):
id - card identifier
serialNumber - card serial number
atr - card ATR (Answer To Reset)
label - card label
state - card state
formFactor - card form factor
pacNumber - card HID label
expirationDate - card expiration date
Example:
http://localhost/icmapi/Card/GetAllCards - output of all cards http://localhost/icmapi/Card/GetAllCards?offset=0&count=50 - output of 50 cards without shifting
6. Preupdate - revoke irrelevant user certificate.
The Preupdate method is required when changing smart card usage policy. If the issued certificate is not supported in the new policy, it will be deleted.
The Preupdate method cannot be performed on a smart card that is disabled, assigned, revoked, and pending issue or update.