> For the complete documentation index, see [llms.txt](https://docs.reveald.com/technical-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.reveald.com/technical-documentation/data-sources/manage-engine-patch-manager-plus/create-a-new-patch-manager-plus-api-key.md).

# Create a New Patch Manager Plus API Key

{% hint style="info" %}
API Keys need to be created to integrate Patch Manager as a data source. This guide is provided so the client can provide a re-usable refresh token. It requires the tool Postman. A basic knowledge of APIs is needed.
{% endhint %}

#### Step 1:

* Log in to Zoho API Console.
* On the **Choose a Client Type** page, select **Self Client**. This is used for integrating Python applications, which is what Epiphany uses to collect API information.

![](/files/c1LsQI6nzBuEii56ZqJu)

* On the **Create New Client** page, ensure **Self Client** is selected and then select **CREATE**.\
  \
  ![](/files/jXQPxFVtMQZVROQrejCg)

#### Step 2:

* On the **Self Client** page, select the **Generate Code** tab and enter the following information:
  * **Scope**: Enter **PatchManagerPlusCloud.restapi.READ, PatchManagerPlusCloud.restapi.UPDATE**. This is required.
  * **Time Duration**: Select **10 Minutes**. This is required.
  * **Scope Description**: Enter **For EIP integrations to Patch Manager** or something similar. This is optional. 

![](/files/ASsf5CMPZuIN0PYlk2Kh)

#### Step 3:

An API call needs to be made shortly after generating the access code. Manage Engine’s API documentation recommends using a tool like Postman to establish the call and acquire the longer-term refresh token. This generated code only lasts 10 minutes.

* On the **Generate Code** tab, select **CREATE.** A code displays that is used to make the first API call:

![](/files/zy8nKTeb40TZVo7PcvM0)

* Select **COPY** to copy the code to your clipboard.

#### Step 4:

The initial API call will follow this format:

> <https://accounts.zoho.com/oauth/v2/token?client\\_id> =\<client\_id>\&grant\_type=authorization\_code\&client\_secret\<client\_secret>\&redirect\_uri=<http://localhost/callback\\&code=\\><code>

In Postman, the Client ID (**client\_id**) and Client Secret (**client\_secret**) are found on the **Client Secret** tab in the **Self Client** screen. A Postman setup will look something like this:

![](/files/Y3qW1vARM08CxAV0V1fw)

#### Step 5:

You can securely store the refresh token, client ID, and client secret on the Epiphany data source portal. Instructions for doing this are in the next section, [*Add the Patch Manager Plus Credentials to Epiphany*](/technical-documentation/data-sources/manage-engine-patch-manager-plus/add-the-patch-manager-plus-credentials-to-epiphany.md).&#x20;

The refresh token is a means to re-establish API connectivity for an hour at a time using the newly generated access tokens.