Managing classic infrastructure API keys

You can use classic infrastructure API keys to access classic infrastructure APIs. You can have only one classic infrastructure API key per user, and each user can create, delete, and view the details for their API key. If you are an ancestor in the classic infrastructure hierarchy for a user, you can also edit or delete those user's API keys.

IBM Cloud® API keys can also be used to access classic infrastructure APIs.

To manage classic infrastructure API keys, go to Manage > Access (IAM) > API keys, and select Classic infrastructure API keys in the IBM Cloud console. You can see your classic infrastructure API key and any API keys for users that you are an ancestor for in the user hierarchy, meaning you invited the user or someone you invited to the account invited the user, and so on.

Creating a classic infrastructure API key

When you create a classic infrastructure API key, you can use the IP address restrictions feature on the User details page. To create a classic infrastructure API key, complete the following steps:

In the IBM Cloud console, go to Manage > Access (IAM) > API keys, and select Classic infrastructure API keys.
Click Create a classic infrastructure key. If you don't see this option, check to see if you already have a classic infrastructure API key that is created because you're only allowed to have one in the account per user.
Copy or download the API key, and save it in a safe place. You can retrieve the details of the API key later.

To get the details of a classic infrastructure API key after you create it, click the Actions icon > View details. You can copy the API key value.

To get the details of a classic infrastructure API key after you create it, go to Manage > Access (IAM) > Users in the IBM Cloud console, then select the user's name. From the API keys section, click the Actions icon > View details in the row for the classic infrastructure API key row. You can copy the API key value.

In most cases, the username of your classic infrastructure API key will be your <account_ID>_<email_address>. It is the same as your VPN username displayed on your User details page in the VPN password section.

To delete a classic infrastructure API key, click the Actions icon > Delete on the row for the API key in the API keys section.

Managing other user's classic infrastructure API keys

If you are an ancestor in the classic infrastructure hierarchy for a user, you can view and delete classic infrastructure API keys for users, including VPN only users.

Only users who create the API key can retrieve the API key value after it's created.

In the IBM Cloud console, go to Manage > Access (IAM) > API keys, and select Classic infrastructure API keys. Then, click the Actions icon , and select actions whether it's to view the details or delete the API key.