Trying to access Microsoft Cloud PKI beta API via CURL and failing with "unknown" error

WK 0 Reputation points
2025-08-07T12:06:24.25+00:00

Hi All,

I am trying to query Microsoft Cloud PKI beta APIs via CURL (7.57.0) and failing. I have setup Cloud PKI properly. I can use the Microsoft Graph Explorer to query the cloud pki but not via CURL from my machine. I can get auth token (via CURL) but when I hit the URL I get unknown error e.g.

curl GET https://graph.microsoft.com/beta/deviceManagement/cloudCertificationAuthority ^
More? -H "Authorization: Bearer eyJ0eXAbvbAKw" ^
More? -H "Accept: application/json"
curl: (6) Could not resolve host: GET
{"error":{"code":"UnknownError","message":"","innerError":{"date":"2025-08-07T11:56:35","request-id":"0b807a49-3ce3-4e2f-9e07-695928635eb1","client-request-id":"0b807a49-3ce3-4e2f-9e07-695928635eb1"}}}

I have registered an App with APPLICATION level permission hence user is not required to login. In permissions I have given:

  • DeviceManagementCloudCA.Read.All
  • DeviceManagementConfiguration.Read.All
  • DeviceManagementManagedDevices.Read.All

With the auth token, I can query devices API without any issue i.e. https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations

Is that the APPLICATION level permission doesn't work with Cloud PK Beta APIs or am I making some mistake?

Microsoft Security | Microsoft Graph
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Vasil Michev 121K Reputation points MVP Volunteer Moderator
    2025-08-08T17:03:32.5733333+00:00

    Application permissions are supported for that endpoint, I'd focus on that "Could not resolve host" error instead. Is this part of the server response, or generated on the client side? Make sure your network is allowing the request.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.