{"id":5184,"date":"2026-06-09T08:00:00","date_gmt":"2026-06-09T05:00:00","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=changelog&#038;p=5184"},"modified":"2026-10-19T11:42:58","modified_gmt":"2026-10-19T08:42:58","slug":"elements-api-2026-06-09-new-device-fields-in-devices-query-response","status":"publish","type":"changelog","link":"https:\/\/support.withsecure.com\/de\/changelogs\/elements-api-2026-06-09-new-device-fields-in-devices-query-response\/","title":{"rendered":"Elements API 2026-06-09: New device fields in devices query response"},"content":{"rendered":"<p>The latest Elements API release adds new fields to the computer device object returned by the <strong>Query devices<\/strong> endpoint (<code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">GET \/devices\/v1\/devices<\/code>). These fields provide richer visibility into device security posture, BitLocker encryption status, and policy configuration.<\/p>\n<p>This is an additive, backward-compatible change. Existing integrations continue to work without modification. New fields are populated when reported by the agent on the device and may be absent on older agents or non-applicable platforms.<\/p>\n<h3 data-id=\"new-top-level-fields\">New top-level fields<\/h3>\n<p><strong>Security policy and tamper protection<\/strong> (reported by the Windows agent):<\/p>\n<ul>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">allowUsersToTurnOffSecurityFeatures<\/code> (boolean): Whether users are allowed to turn off security features on the device<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">allowUsersToUninstallProduct<\/code> (boolean): Whether local users are allowed to uninstall the security product<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">tamperProtectionEnabled<\/code> (boolean): Whether tamper protection is enabled<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">uninstallationPasswordSet<\/code> (boolean): Whether an uninstallation password has been configured<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">uninstallationPasswordEmpty<\/code> (boolean): Whether the uninstallation password is empty (not configured or blank)<\/li>\n<\/ul>\n<p><strong>BitLocker and disk encryption<\/strong> (reported by the Windows agent):<\/p>\n<ul>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">bitlockerOverallProtectionStatus<\/code> (string): Overall BitLocker protection status (<code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">all<\/code>, <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">some<\/code>, or <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">none<\/code>)<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">bitlockerRecoveryKeysCollectionEnabled<\/code> (boolean): Whether BitLocker recovery key collection is enabled in the device\u2019s policy<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">bitlockerRecoveryKeysCollectionSuccess<\/code> (boolean): Whether the most recent BitLocker recovery key collection completed successfully<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">diskEncryptionPolicy<\/code> (string): Disk encryption policy (profile protection setting) applied to the device<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">policyUseTpm<\/code> (string): Policy setting for using the Trusted Platform Module (TPM)<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">policyUseTpmWithStartupPin<\/code> (string): Policy setting for using TPM with a startup PIN<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">tpmAvailable<\/code> (boolean): Whether a TPM chip is available on the device<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">encryptedDrives<\/code> (array): List of drives and their BitLocker encryption status (see below)<\/li>\n<\/ul>\n<p><strong>Device lifecycle<\/strong> (reported by the agent):<\/p>\n<ul>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">lastRestartTime<\/code> (string, date-time): Date and time of the last device restart (ISO 8601 format)<\/li>\n<\/ul>\n<h3 data-id=\"new-fields-in-encrypteddrives-items\">New fields in <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">encryptedDrives<\/code> items<\/h3>\n<p>Each entry in the <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">encryptedDrives<\/code> array includes:<\/p>\n<ul>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">drive<\/code> (string): Drive letter designation (for example <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">c:<\/code>)<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">driveType<\/code> (string): Drive type (<code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">system<\/code>, <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">fixed<\/code>, or <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">removable<\/code>)<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">systemDrive<\/code> (boolean): Whether this is the system drive<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">encryptionStatus<\/code> (string): Current status (<code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">fully_decrypted<\/code>, <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">fully_encrypted<\/code>, <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">encryption_in_progress<\/code>, <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">decryption_in_progress<\/code>, <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">encryption_paused<\/code>, or <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">decryption_paused<\/code>)<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">encryptionPercentage<\/code> (integer): Percentage of the drive that is encrypted (0\u2013100)<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">encryptionMethod<\/code> (string): Encryption algorithm and key size (for example <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">xts_aes_256<\/code>, <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">aes_128<\/code>, <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">hardware_encryption<\/code>)<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">protectionStatus<\/code> (boolean): Whether BitLocker protection is active on the drive<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">protectors<\/code> (array of strings): Key protector types configured (for example <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">tpm<\/code>, <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">numeric_password<\/code>, <code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">tpm_and_pin<\/code>)<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">bitlockerRecoveryKeyId<\/code> (string): BitLocker recovery key identifier in Windows GUID format<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">autounlock<\/code> (boolean): Whether auto-unlock is enabled for this drive<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">autounlockStored<\/code> (boolean): Whether an auto-unlock key for another drive is stored on this drive<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">pinRequested<\/code> (boolean): Whether a BitLocker PIN has been requested<\/li>\n<li><code class=\"code codeInline\" spellcheck=\"false\" tabindex=\"0\">pinPostponed<\/code> (boolean): Whether the user has postponed setting a BitLocker PIN<\/li>\n<\/ul>\n<p>See the full Elements API specification for details: <a href=\"https:\/\/community.withsecure.com\/home\/leaving?allowTrusted=1&amp;target=https%3A%2F%2Fconnect.withsecure.com%2Fapi-reference%2Felements%23get-%2Fdevices%2Fv1%2Fdevices\" target=\"_blank\" rel=\"nofollow noopener ugc\">Query devices<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The latest Elements API release adds new fields to the computer device object returned by the Query devices endpoint (GET \/devices\/v1\/devices). These fields provide richer visibility into device security posture,&hellip;<\/p>\n","protected":false},"template":"","changelog_product":[128],"class_list":["post-5184","changelog","type-changelog","status-publish","hentry"],"acf":{"release_date":"20260609","version":"","source_system":"vanilla-import","source_foreign_id":"","import_hash":"3ae4f395e6f9762820e71191da3c08f4302aee3a","vanilla_article_id":32962,"legacy_author":"ArtoV","vanilla_url":"https:\/\/community.withsecure.com\/changelogs-en\/kb\/articles\/32962-elements-api-2026-06-09-new-device-fields-in-devices-query-response","vanilla_category_id":170,"machine_translated":false},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/changelog\/5184","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/changelog"}],"about":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/types\/changelog"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/media?parent=5184"}],"wp:term":[{"taxonomy":"changelog_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/changelog_product?post=5184"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}