We received an email saying an API key was generated in our Hexnode portal, but none of our admins intentionally created or enabled an API key. The notification went to the administrators, so it raised some security concerns.
Is this email always caused by someone manually generating a key? Also, if the portal/subscription is no longer active, does that API key still pose any risk?
71 Views
Hi @shirleyc ,
An API key generation email is automatically sent to the administrators of a Hexnode UEM portal whenever an API key is generated or enabled for that portal.
A few points to clarify the behavior:
If the portal or subscription has been cancelled, the API key is disabled and cannot be used to access or manage devices through the portal.
Regards,
Isabel Lora
Hexnode UEM
So if none of our admins clicked anything, it could still happen because the existing key was revoked and enabled again? That was the confusing part for us.
Yes. If the existing API key is revoked and then enabled again, Hexnode UEM generates a fresh key instead of restoring the old one. That action triggers the same administrator notification.
For security-sensitive cases, administrators can review portal activity and technician access to confirm who performed the revoke or enable action. If the portal is already inactive or cancelled, the generated key is disabled along with the portal, so it will not provide active API access.
Regards,
Isabel Lora
Hexnode UEM
Don't have an account? Sign up
What's new 
