API Keys are going through a deprecation process and are planned to be deprecated by the end of Q4 2024 (more information can be found in the linked article). In order to get ready for the deprecation of API keys, Artifactory administrators are given the ability to prevent the creation of new API keys. This functionality is available starting from version 7.41. This can be done by adding the following system property to the $JFROG_HOME/artifactory/var/etc/artifactory/artifactory.system.properties, setting the API key creation blockage to “true”:
artifactory.security.apiKey.blockCreate=true
(This change requires a restart of Artifactory)
In Artifactory versions 7.77 and greater, the API key block create property needs to be also set in the Access YAML Configuration file on top of the artifactory.system.properties file as mentioned above. The following configuration should be added:
security: authentication: disable-api-key-creation: true
This change requires bootrapping the access.config.latest.yaml file as outlined here, following a restart of Artifactory for the change to take effect. For the supported Access configuration settings, please visit the Supported Access Configurations page.
Note: API keys that were created prior to setting the property will still work until the final deprecation.