Parameter	Value
use_application_id	Your application ID
use_api_key	Your API key
use_url_base	Your server URL

use_application_id = YOUR_APPLICATION_ID
use_api_key = YOUR_API_KEY
use_url_base = YOUR_SERVER_URL

import base64
import jwt
import hashlib
import time
import json

def create_checksum(http_method, raw_url, headers, request_body):
    string_to_hash = http_method.upper() + '|' + raw_url.lower() + '|' + headers + '|' + request_body
    base64_string = base64.b64encode(hashlib.sha256(str.encode(string_to_hash)).digest()).decode('utf-8')
    return base64_string

def create_jwt_token(appication_id, api_key, http_method, raw_url, headers, request_body,
                     iat=time.time(), algorithm='HS256', version='V1'):
    checksum = create_checksum(http_method, raw_url, headers, request_body)
    payload = {'appid': appication_id,
               'iat': iat,
               'version': version,
               'checksum': checksum}
    token = jwt.encode(payload, api_key, algorithm=algorithm).decode('utf-8')
    return token

For more information about the "List Security Agents" API, see https://automation.trendmicro.com/apex-central/api#tag/Security-Agents.

print('(Optional) Get the Security Agent list, if you does not have host name.')
productAgentAPIPath = '/WebApp/API/AgentResource/ProductAgents'
canonicalRequestHeaders = ''
 
useRequestBody = ''
useQueryString=''
 
jwt_token = create_jwt_token(use_application_id, use_api_key, 'GET',
                              productAgentAPIPath + useQueryString,
                              canonicalRequestHeaders, useRequestBody, iat=time.time())
 
headers = {'Authorization': 'Bearer ' + jwt_token , 'Content-Type': 'application/json;charset=utf-8'}
r = requests.get(use_url_base + productAgentAPIPath + useQueryString, headers=headers, verify=False)

if r.status_code !=200 and r.status_code!=201:
  print('Not successful, please handle your error')
 
#Show the information of agents. 
# print(r.status_code)
# print(json.dumps(r.json(), indent=4))
host_name = r.json()["result_content"][0]["host_name"]
print("host name:", host_name)

200
{
    "result_code": 1,
    "result_description": "Operation successful",
    "result_content": [
       {
            "entity_id": "492E8584-0114-694D-BF9D-44CC20141501",
            "product": "SLF_PRODUCT_OFFICESCAN_CE",
            "managing_server_id": "33111111-1111-AAAA-AAAA-111100000001",
            "ad_domain": "",
            "folder_path": "DOMAIN",
            "ip_address_list": "10.1.1.1",
            "mac_address_list": "00-60-59-A4-70-2D",
            "host_name": "client01",
            "isolation_status": "normal",
            "capabilities": [
                "cmd_restore_isolated_agent",
                "cmd_isolate_agent",
                "cmd_relocate_agent",
                "cmd_uninstall_agent"
            ]
        },
        ...
        {
            "entity_id": "80180123-1059-CCCC-CCCC-111100000010",
            "product": "SLF_PRODUCT_HEADLESS_DSM",
            "managing_server_id": "80180123-1059-694D-BF9D-44CC80320001",
            "ad_domain": "",
            "folder_path": "iptlab",
            "ip_address_list": "100.1.1.10",
            "mac_address_list": "00-50-56-A7-69-10",
            "host_name": "host8",
            "isolation_status": "not_supported",
            "capabilities": []
        }
    ]
}

### Setting the host name of security agent.
print('Setting the host name of security agent.')
host_name = r.json()["result_content"][0]["host_name"]
print("host name:", host_name)

For more information about the "Isolate, Restore, Relocate, or Uninstall Security Agent" API, see https://automation.trendmicro.com/apex-central/api#operation/AgentResource_PostProductAgents.

To successfully restore the network connection of the Security Agent, you must include all of the following parameters in the payload.

Parameter	Value	Purpose
host_name	YOUR_HOST_NAME	Identifies the endpoint on which the Security Agent is installed
act	cmd_restore_isolated_agent	Restores the network connection of the Security Agent
allow_multiple_match	True	Allows modification of multiple Security Agents

You can identify the Security Agent using one or more (any combination) of the following parameters. In this use case, only host_name is specified.

Name	Type	Description
entity_id	String	GUID of the managed product agent
host_name	String	Endpoint name of the managed product agent
ip_address	String	IP address of the managed product agent
mac_address	String	MAC address of the managed product agent
product	String	Trend Micro product on the server instance

### Restore isolate security agent  network connection
print('Restore isolate security agent  network connection')
productAgentAPIPath = '/WebApp/API/AgentResource/ProductAgents'
canonicalRequestHeaders = ''
useQueryString = ''
payload = {
  "host_name":host_name,
  "act":"cmd_restore_isolated_agent",
  "allow_multiple_match":True
  }
useRequestBody = json.dumps(payload) 
  
jwt_token = create_jwt_token(use_application_id, use_api_key, 'POST',
                              productAgentAPIPath + useQueryString,
                              canonicalRequestHeaders, useRequestBody, iat=time.time())
 
headers = {'Authorization': 'Bearer ' + jwt_token , 'Content-Type': 'application/json;charset=utf-8'}
r = requests.post(use_url_base + productAgentAPIPath + useQueryString, headers=headers, data=useRequestBody, verify=False)

if r.status_code !=200 and r.status_code!=201:
  print('Not successful, please handle your error')
 
print(r.status_code)
print(json.dumps(r.json(), indent=4))

Value	Description
connection_restoration_pending	The agent restoration command has been issued and reconnection of the Security Agent to the network is pending.
endpoint_isolation_pending	The agent isolation command has been issued and agent isolation is pending.
isolated	The Security Agent is currently isolated from the network.
normal	The network connection of the Security Agent is normal and, if applicable, can be isolated from the network.
not_supported	The Security Agent version does not support this function.

If your request was successful, the response will be similar to the following:

200
{
    "result_code": 1,
    "result_description": "Operation successful",
    "result_content": [
      {
       "entity_id":"8a1a84550462-40bc9afc-3770-16ac-cd6c",
       "product":"SLF_PRODUCT_OFFICESCAN_CE",
       "managing_server_id":
          "026332F39EBC-41C19604-02DD-2C5F-EDE5",
       "ad_domain":"",
       "folder_path":"Workgroup",         
       "ip_address_list":"192.168.121.132",
       "mac_address_list":"00-0C-29-9B-AB-65",         
       "host_name":"OSCECLIENT",
       "isolation_status":"normal",         
       "capabilities":[
          "cmd_uninstall_agent",
          "cmd_relocate_agent",
          "cmd_isolate_agent",
          "cmd_restore_isolated_agent"
        ]
      }
    ]
}