Get an endpointID for a specific endpoint

Question

How can we get an endpointID for a specific endpoint? I can't see any option to retrieve this, unless it's already known. 
 I know that I can retrieve a list of all endpoints, but even then, matching the entries up to specific endpoints is not straightforward. The only identifying information included is hostname (which is not necessarily unique) and MAC address (which can change, with use of adapters, spoofed addresses etc). 
 Ideally I would like to be able to retrieve the ID from the endpoint itself, e.g. by reading a log or config file. As an alternative, it would be acceptable to search the API by serial number. This is mostly on Macs, if that matters.

rcbolio · Accepted Answer

Hi Mike Dowler , 
 As you mentioned the endpoint does report an endpoint ID in its configuration and also in the central console. in Central if you go to a device summary page and you look at the url, there is an ID in between computers/ and /summary. This should match the endpoint ID found in the configuration file. 
 On a windows machine, the config file is located at C:\ProgramData\Sophos\Management Communications System\Endpoint\Persist\endpointIdentity.txt 
 Now the trick is that you can match this to the ID obtained by the API by inverting the characters in pairs, for example, let's say the first 8 characters in my API returned ID are ac 00 b5 8c, this would translate to ca 00 5b c8. I can confirm this for Windows devices, but the same should apply for Mac. 
 Hope this helps. 
 
 Thanks 
 Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts If a post solves your question use the 'Verify Answer' link.

Get an endpointID for a specific endpoint

Top Replies