enumeray connector enrollment

Issue a replacement one-time enrollment credential for a registered connector.

Use when: Enrollment needs to be retried with a new secret or an approved host installation needs enrollment.

Role and prerequisites: Connector owner or current co-admin. Install enumeray, configure the API and log in. Use an account or delegated token with the required permissions. Example IDs must be replaced with IDs from your service.

Example

enumeray connector enrollment lab-connector --output replacement-enrollment.json

Inputs and options

Input	Meaning and use
<ID>	Existing connector ID from connector list/get.
--output <OUTPUT>	New private JSON file containing the replacement enrollment_token; an existing file is refused.

Every command also accepts the profile, API, JSON and timeout options.

Result and next step

Reports success only after validating and saving a private replacement enrollment document. Existing output paths are refused before a request. Issuance invalidates earlier unused enrollments; it is separate from the long-lived host credential. Lost replies or unconfirmed saves cause one read-only inspection, never an automatic retry or replacement.

Preserve and privately inspect any output left by an unconfirmed save before requesting another secret. Retry uncertain host enrollment using the same enrollment file and durable identity directory. An expired unused enrollment can be replaced for an identity that never enrolled. After successful enrollment, stop the daemon and use a new private credential directory while retaining the original execution journal; see credential rotation.

Exact syntax, defaults and accepted values

Issue a replacement one-time enrollment credential and save it privately

Usage: enumeray connector enrollment [OPTIONS] --output <OUTPUT> <ID>

Arguments:
  <ID>  Stable connector ID from connector list/get

Options:
      --api <API>          User API origin override; credentials never cross origins. Host/runner commands use explicit configuration
      --output <OUTPUT>    New private JSON file for the replacement one-time enrollment secret
      --profile <PROFILE>  Named local user API/login profile; host/runner commands use explicit configuration [default: default]
      --config <CONFIG>    Private user profiles file; defaults to $XDG_CONFIG_HOME/enumeray/profiles.json or ~/.config/enumeray/profiles.json
      --json               Emit user API results as JSON (NDJSON for following logs) and runtime errors on stderr; host/runner output follows its own protocol
      --timeout <TIMEOUT>  User API HTTP timeout in seconds; live logs use it for read inactivity. Does not limit execution time [default: 60]
  -h, --help               Print help