API Key / Client ID + Secret Creation
You must log into the Check Point Infinity Portal or the Harmony Endpoint management console.
Navigate to the API Keys (External API / Service API) section.
When creating a new API key, the Service / Product option must be set to Harmony Endpoint.
Once the API key is created, the system will provide the Client ID and Secret / Access Key.
These credentials will be used for API authentication (for example, when obtaining an access token).
API Key Permissions (Scopes)
For the API key to function correctly, the following permissions must be assigned:
• fetch assets
• fetch vulnerabilities
• fetch events / logs / incidents
• fetch remediation status / results
• fetch quarantine items
If the API key is created with only the "asset fetch" permission, it will only be able to retrieve device and vulnerability information.
To retrieve quarantine, remediation, or event/log data, the relevant "data fetch / read-only" permissions must be granted.
Endpoint Agent and Module Requirements
Having an API key alone is not sufficient for retrieving data.
The following conditions must be met:
Harmony Endpoint Agent / Client must be installed on all endpoint machines.
The following protection modules must be enabled on the agent:
• Malware / Anti-Malware
• Forensics
• Quarantine
• Remediation
• Vulnerability Management
All of these modules must be licensed and active.
If these modules are not active, the relevant data types cannot be retrieved through the API.
Log Collection and Centralized Log Management
To retrieve logs via the API (events, quarantine, remediation, anti-malware, etc.):
The Log Collection / Central Logging feature must be enabled in the management console.
In the Harmony Endpoint Logs section, logs coming from endpoint devices must be visible.
If logs are not visible in the portal, they cannot be retrieved via the API.
Ensure that the log collection infrastructure is properly enabled before attempting API log queries.
Configure Integration in Logsign USO
Log in to your Logsign USO instance.
Go to Data Sources → Add New → API → Checkpoint Harmony
Enter the following fields:
- Client ID: the Client ID obtained when the API key was created.
- Secret / Access Key: the Secret (Access Key) obtained together with the Client ID. Logsign refers to this field as the API key's secret value, not a separate password.
- Base URL: the API gateway address for your Check Point Infinity Portal tenant, shown alongside the Client ID and Secret when the key was created. This is typically a cloudinfra-gw.portal.checkpoint.com address; copy it exactly as displayed rather than assuming a fixed value, since Check Point assigns this per region/tenant (doğrulanmadı against a live tenant during this research).
Click Save. If the connection test fails, re-check that all three fields above were copied exactly from the Infinity Portal (a stray space or missing scheme on the Base URL is the most common cause), and confirm the API key still has the permissions listed above.