## Introduction

Tenable Attack Surface Management (ASM) discovers the internet-facing assets your organization owns and the vulnerabilities observed on them. This guide shows you how to copy your API key from Tenable ASM and configure the integration.

## Prerequisites

Before you begin, ensure that you have:

- Access to the Tenable Attack Surface Management console


## Required Permissions

| Role | Purpose |
|  --- | --- |
| View only | Read the assets Tenable ASM has discovered and the vulnerabilities observed on them |


A role of Active User, Cloud Connector Manager, or Business Administrator also works. The key carries the permissions of the account that created it, and this integration only reads.

## Obtaining an API Key

1. Log in to Tenable Attack Surface Management
2. Select your profile picture or initials in the upper right corner
3. In the section titled *API Key for all your inventories*, select **Copy API Key**
4. Store the key in a safe location
5. You now have an API key. Proceed to the next section titled [Configuring the Integration](#configuring-the-integration)


A Tenable ASM key is not the same as a Tenable Vulnerability Management key. Tenable ASM uses a single key rather than an access key and secret key pair, and a key from another Tenable product will not authenticate.

For more information on Tenable ASM API keys, see the [Tenable generate API keys docs page](https://docs.tenable.com/attack-surface-management/Content/Topics/UserProfile/GenerateAPIKeys.htm)

## Configuring the Integration

To configure a new Tenable Attack Surface Management integration, provide each of the values as defined below:

| Integration Parameter | Description |
|  --- | --- |
| API Key | This is the API key you copied and stored above |


### Optional fields

| Integration Parameter | Description |
|  --- | --- |
| Base URL | This is the address used to reach Tenable ASM. It is only needed when you reach Tenable ASM through a proxy or at a non-standard host. Leave it empty to use the standard address |