---
title: "List JSON Web Keys associated with enrollment"
method: GET
path: "/enroll/jwks"
tags: ["Enroll"]
---

# List JSON Web Keys associated with enrollment

`GET /enroll/jwks`

Returns a list of JSON Web Keys (JWKS) that are used for enrollment signing. The keys listed here are used
to sign and co-sign enrollment JWTs. They can be verified through a challenge endpoint, using the public keys
from this endpoint to verify the target machine has possession of the related private key.

## Response `200`

A JWKS response for enrollment.

- Jwks
  - `keys` Jwk[]
    - `alg` string — Algorithm intended for use with the key.
    - `crv` string — Curve for ECC Public Keys.
    - `d` string — ECC Private Key or RSA Private Exponent.
    - `dp` string — First Factor CRT Exponent for RSA.
    - `dq` string — Second Factor CRT Exponent for RSA.
    - `e` string — Exponent for RSA Public Key.
    - `key_ops` string[] — Intended key operations, e.g., sign, verify.
    - `kid` string — Key ID.
    - `kty` string, required — Key Type.
    - `n` string — Modulus for RSA Public Key.
    - `oth` OtherPrime[] — Other Primes Info not represented by the first two primes.
      - `d` string — Factor CRT exponent.
      - `r` string — Prime factor.
      - `t` string — Factor CRT coefficient.
    - `p` string — First Prime Factor for RSA.
    - `q` string — Second Prime Factor for RSA.
    - `qi` string — First CRT Coefficient for RSA.
    - `use` string — Public key use, e.g., sig (signature) or enc (encryption).
    - `x` string — X Coordinate for ECC Public Keys.
    - `x5c` string[] — X.509 Certificate Chain.
    - `x5t` string — X.509 Certificate SHA-1 Thumbprint.
    - `x5t#S256` string — X.509 Certificate SHA-256 Thumbprint.
    - `x5u` string — X.509 URL.
    - `y` string — Y Coordinate for ECC Public Keys.

---

[API](https://skmtc.net/openziti/apis/ziti-edge-client.md) · [All operations](https://skmtc.net/openziti/apis/ziti-edge-client/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openziti/ziti-edge-client/revisions/25da9a73a095/schema)