Retrieve a request template

Retrieve the template to fulfill a specific request. The template indicates the required element to include when submitting a new request

Body required

application/json

The request on which to return the template

workflow

string required

The workflow for which to return the template.

Value enroll

module

string required

The module for which to return the template.

Value webra

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

profile

string | null (Certificate profile)

The profile for which to return the template.

template

object (WebRA Enroll Request Template)

The template with the constraint set on the profile

csr

string | null

Used to pre-fill the template field with the CSR values.

keyType

string | null (Keytype)

The type of key that will be used to generate the certificate, if in centralized mode

Enum rsa-<size> ec-secp256r1 ec-secp384r1 ec-secp521r1 ed-Ed448 ed-Ed25519

subject

array of objects | null (IndexedDNElement)

List of DN elements that will be used to build the certificate's Distinguished Name

Array [

element

string required

The element type and index. Indexes start at 1 !

Enum cn e ou st l o c dc uid serialNumber surname givenName unstructuredAddress unstructuredName organizationIdentifier uniqueIdentifier street description

type

string | null

The formatted element type

Enum CN E OU ST L O C DC UID SERIALNUMBER SURNAME GIVENNAME unstructuredAddress unstructuredName organizationIdentifier UniqueIdentifier STREET DESCRIPTION

value

string | null

The element value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

mandatory

boolean | null

Whether the field is mandatory or not

editable

boolean | null

Whether the field is editable or not for the currently authenticated user

regex

string | null

A regular expression that will be used to validate the element's value

]

sans

array of objects | null (SAN Element)

List of SAN elements that will be used to build the certificate's Subject Alternative Name

Array [

type

string | null required

SAN type

Enum RFC822NAME DNSNAME URI IPADDRESS OTHERNAME_UPN OTHERNAME_GUID

value

array of string | null

SAN value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether this SAN element is editable by the user

regex

string | null

The regex that will be used to validate the SAN value

min

integer | null

The minimum number of SAN elements that must be provided

max

integer | null

The maximum number of SAN elements that can be provided

]

extensions

array of objects | null (Certificate Extension)

Information about the certificate's extensions and how to edit them

Array [

type

string required

The type of the extension element

Enum ms_sid ms_template

value

string | null

The value of the extension element

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the extension element is editable by the requester

regex

string | null

The regular expression to validate the extension element

mandatory

boolean | null

Whether the extension element is mandatory to submit this request

]

labels

array of objects | null (Label)

List of labels used internally to tag and group certificates

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

contactEmail

object | null (Contact email)

Information about the certificate's contact email and how to edit it

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

owner

object | null (Certificate Owner)

Information about the certificate's owner and how to edit it

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

Information about the certificate's team and how to edit it

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

capabilities

object | null (Certificate profile crypto policy)

Describes how certificates will be enrolled on this profile

centralized

boolean required

Whether this profile supports centralized enrollment

decentralized

boolean required

Whether this profile supports decentralized enrollment

escrow

boolean required

Whether this profile will escrow the certificate private keys

defaultKeyType

string | null (Keytype)

Default key type used for centralized enrollment

Enum rsa-<size> ec-secp256r1 ec-secp384r1 ec-secp521r1 ed-Ed448 ed-Ed25519

authorizedKeyTypes

array of string | null (Keytype)

List of authorized key types for enrollment

preferredEnrollmentMode

string | null

If both centralized and decentralized enrollment are supported, this is the preferred mode

Enum centralized decentralized

p12passwordPolicy

string | null

Password policy for the P12 file

p12passwordMode

string | null

Whether the user will be required to input their PKCS#12 password upon enrollment

Enum random manual

p12storeEncryptionType

string | null

Encryption type for the P12 file

showP12PasswordOnEnroll

boolean | null

Whether the PKCS#12 password will be displayed to the user upon enrollment

showP12OnEnroll

boolean | null

Whether the PKCS#12 file will be displayed to the user upon enrollment

showP12PasswordOnRecover

boolean | null

Whether the PKCS#12 password will be displayed to the user upon recovery

showP12OnRecover

boolean | null

Whether the PKCS#12 file will be displayed to the user upon recovery

passwordPolicy

object | null (Password Policy)

The password policy that will be used to generate the certificate's PKCS#12 password

_id

string (Internal ID) required

The internal ID of the password policy

name

string required

The name of the password policy

minChar

integer required

The minimum number of characters of the password

maxChar

integer | null

The maximum number of characters of the password

minUpChar

integer | null

The minimum number of uppercase characters of the password

minLoChar

integer | null

The minimum number of lowercase characters of the password

minDiChar

integer | null

The minimum number of digits of the password

spChar

string | null

The special characters of the password accepted by the password policy

minSpChar

integer | null

The minimum number of special characters of the password

workflow

string required

The workflow for which to return the template.

Value update

template

object (WebRA Update Request Template) required

The template with the constraint set on the profile

labels

array of objects | null (Label)

Information about the certificate's labels and how to edit them

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

metadata

array of objects | null (Certificate Metadata)

Information about the certificate's metadata and how to edit them

Array [

metadata

string required

Technical metadata related to the certificate

Enum pki_connector previous_certificate_id renewed_certificate_id automation_policy gs_order_id metapki_id digicert_id entrust_id scep_transid fcms_id gsatlas_id certeurope_id digicert_order_id

value

string | null

The value of the metadata element

editable

boolean | null

Whether the metadata element is editable by the requester

]

owner

object | null (Certificate Owner)

Information about the certificate's owner and how to edit it

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

Information about the certificate's team and how to edit it

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

contactEmail

object | null (Contact email)

Information about the certificate's contact email and how to edit it

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

profile

string | null (Certificate profile)

The profile for which to return the template.

workflow

string required

The workflow for which to return the template.

Value migrate

template

object (models.webra.WebRAMigrateRequestTemplate) required

The template with the constraint set on the profile

labels

array of objects | null (Label)

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

owner

object | null (Certificate Owner)

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

metadata

array of objects | null (Certificate Metadata)

Array [

metadata

string required

Technical metadata related to the certificate

value

string | null

The value of the metadata element

editable

boolean | null

Whether the metadata element is editable by the requester

]

contactEmail

object | null (Contact email)

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

profile

string | null (Certificate profile)

The profile for which to return the template.

workflow

string required

The workflow for which to return the template.

Value renew

template

object (WebRA Renew Request Template) required

The cryptography policy applied during the recovery of a certificate

capabilities

object | null (Certificate profile crypto policy)

Describes how certificates will be enrolled on this profile

centralized

boolean required

Whether this profile supports centralized enrollment

decentralized

boolean required

Whether this profile supports decentralized enrollment

escrow

boolean required

Whether this profile will escrow the certificate private keys

defaultKeyType

string | null (Keytype)

Default key type used for centralized enrollment

Enum rsa-<size> ec-secp256r1 ec-secp384r1 ec-secp521r1 ed-Ed448 ed-Ed25519

authorizedKeyTypes

array of string | null (Keytype)

List of authorized key types for enrollment

preferredEnrollmentMode

string | null

If both centralized and decentralized enrollment are supported, this is the preferred mode

Enum centralized decentralized

p12passwordPolicy

string | null

Password policy for the P12 file

p12passwordMode

string | null

Whether the user will be required to input their PKCS#12 password upon enrollment

Enum random manual

p12storeEncryptionType

string | null

Encryption type for the P12 file

showP12PasswordOnEnroll

boolean | null

Whether the PKCS#12 password will be displayed to the user upon enrollment

showP12OnEnroll

boolean | null

Whether the PKCS#12 file will be displayed to the user upon enrollment

showP12PasswordOnRecover

boolean | null

Whether the PKCS#12 password will be displayed to the user upon recovery

showP12OnRecover

boolean | null

Whether the PKCS#12 file will be displayed to the user upon recovery

passwordPolicy

object | null (Password Policy)

The password policy that will be used to generate the certificate's PKCS#12 password

_id

string (Internal ID) required

The internal ID of the password policy

name

string required

The name of the password policy

minChar

integer required

The minimum number of characters of the password

maxChar

integer | null

The maximum number of characters of the password

minUpChar

integer | null

The minimum number of uppercase characters of the password

minLoChar

integer | null

The minimum number of lowercase characters of the password

minDiChar

integer | null

The minimum number of digits of the password

spChar

string | null

The special characters of the password accepted by the password policy

minSpChar

integer | null

The minimum number of special characters of the password

profile

string (Certificate profile) required

The profile for which to return the template.

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

workflow

string required

The workflow for which to return the template.

Value import

template

object (WebRA Import Request Template) required

privateKey

string | null

The PEM-encoded private key associated with the certificate. Mandatory if target profile has escrow enabled, forbidden otherwise

owner

object | null (Certificate Owner)

The owner for this certificate

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

The team for this certificate

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

contactEmail

object | null (Contact email)

The contact email for this certificate

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

labels

array of objects | null (Label)

The labels for this certificate

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

metadata

array of objects | null (Certificate Metadata)

The technical metadata for this certificate

Array [

metadata

string required

Technical metadata related to the certificate

value

string | null

The value of the metadata element

editable

boolean | null

Whether the metadata element is editable by the requester

]

thirdPartyData

array of objects | null (models.thirdparty.ThirdPartyItem)

The third party data associated with the certificate

Array [

connector

string required

The third party connector name on which this certificate is synchronized

string required

The Id of this certificate on the third party

fingerprint

string | null

The fingerprint of this certificate on the third party

pushDate

integer | null

The date when the certificate was pushed to this third party

removeDate

integer | null

The date when the certificate was removed from this third party (in case of revocation)

]

discoveryInfo

object | null (models.discovery.DiscoveryInfo)

Information about the discovery of this certificate

campaign

string required

The discovery campaign's name

lastDiscoveryDate

integer required

When this certificate was discovered for the last time

identifier

string | null

Identifier of the user that discovered this certificate

discoveryData

object (models.discovery.HostDiscoveryData)

The host discovery data associated with the certificate (discovery metadata)

string | null

The certificate's host ip

sources

array of string | null

Information on the type of discovery that discovered this certificate

hostnames

array of string | null

The certificate's host hostnames (netscan only)

operatingSystems

array of string | null

The certificate's host operating system (localscan only)

paths

array of string | null

The path to the certificate on the host machine (localscan only)

usages

array of string | null

The path of the configuration files that were used to find the certificates

tlsPorts

array of objects | null (models.discovery.TlsPort)

The ports on which the certificate is exposed for https connexion

profile

string (Certificate profile) required

The profile for which to return the template.

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

workflow

string required

The workflow for which to return the template.

Value enroll

module

string required

The module for which to return the template.

Value est

template

object (EST Enroll Request Template) required

The template with the constraint set on the profile

subject

array of objects | null (IndexedDNElement)

List of DN elements that will be used to build the certificate's Distinguished Name

Array [

element

string required

The element type and index. Indexes start at 1 !

Enum cn e ou st l o c dc uid serialNumber surname givenName unstructuredAddress unstructuredName organizationIdentifier uniqueIdentifier street description

type

string | null

The formatted element type

Enum CN E OU ST L O C DC UID SERIALNUMBER SURNAME GIVENNAME unstructuredAddress unstructuredName organizationIdentifier UniqueIdentifier STREET DESCRIPTION

value

string | null

The element value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

mandatory

boolean | null

Whether the field is mandatory or not

editable

boolean | null

Whether the field is editable or not for the currently authenticated user

regex

string | null

A regular expression that will be used to validate the element's value

]

sans

array of objects | null (SAN Element)

List of SAN elements that will be used to build the certificate's Subject Alternative Name

Array [

type

string | null required

SAN type

Enum RFC822NAME DNSNAME URI IPADDRESS OTHERNAME_UPN OTHERNAME_GUID

value

array of string | null

SAN value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether this SAN element is editable by the user

regex

string | null

The regex that will be used to validate the SAN value

min

integer | null

The minimum number of SAN elements that must be provided

max

integer | null

The maximum number of SAN elements that can be provided

]

extensions

array of objects | null (Certificate Extension)

Information about the certificate's extensions and how to edit them

Array [

type

string required

The type of the extension element

Enum ms_sid ms_template

value

string | null

The value of the extension element

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the extension element is editable by the requester

regex

string | null

The regular expression to validate the extension element

mandatory

boolean | null

Whether the extension element is mandatory to submit this request

]

labels

array of objects | null (Label)

List of labels used internally to tag and group certificates

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

contactEmail

object | null (Contact email)

Information about the certificate's contact email and how to edit it

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

owner

object | null (Certificate Owner)

Information about the certificate's owner and how to edit it

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

Information about the certificate's team and how to edit it

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

dnWhitelist

boolean | null

DN whitelist is enabled on this request

profile

string (Certificate profile) required

The profile for which to return the template.

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

workflow

string required

The workflow for which to return the template.

Value enroll

module

string required

The module for which to return the template.

Enum scep jamf

template

object (SCEP Enroll Request Template) required

The template with the constraint set on the profile

subject

array of objects | null (IndexedDNElement)

List of DN elements that will be used to build the certificate's Distinguished Name

Array [

element

string required

The element type and index. Indexes start at 1 !

Enum cn e ou st l o c dc uid serialNumber surname givenName unstructuredAddress unstructuredName organizationIdentifier uniqueIdentifier street description

type

string | null

The formatted element type

Enum CN E OU ST L O C DC UID SERIALNUMBER SURNAME GIVENNAME unstructuredAddress unstructuredName organizationIdentifier UniqueIdentifier STREET DESCRIPTION

value

string | null

The element value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

mandatory

boolean | null

Whether the field is mandatory or not

editable

boolean | null

Whether the field is editable or not for the currently authenticated user

regex

string | null

A regular expression that will be used to validate the element's value

]

sans

array of objects | null (SAN Element)

List of SAN elements that will be used to build the certificate's Subject Alternative Name

Array [

type

string | null required

SAN type

Enum RFC822NAME DNSNAME URI IPADDRESS OTHERNAME_UPN OTHERNAME_GUID

value

array of string | null

SAN value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether this SAN element is editable by the user

regex

string | null

The regex that will be used to validate the SAN value

min

integer | null

The minimum number of SAN elements that must be provided

max

integer | null

The maximum number of SAN elements that can be provided

]

extensions

array of objects | null (Certificate Extension)

Information about the certificate's extensions and how to edit them

Array [

type

string required

The type of the extension element

Enum ms_sid ms_template

value

string | null

The value of the extension element

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the extension element is editable by the requester

regex

string | null

The regular expression to validate the extension element

mandatory

boolean | null

Whether the extension element is mandatory to submit this request

]

labels

array of objects | null (Label)

List of labels used internally to tag and group certificates

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

contactEmail

object | null (Contact email)

Information about the certificate's contact email and how to edit it

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

owner

object | null (Certificate Owner)

Information about the certificate's owner and how to edit it

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

Information about the certificate's team and how to edit it

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

dnWhitelist

boolean | null

DN whitelist is enabled on this request

profile

string (Certificate profile) required

The profile for which to return the template.

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

Responses

200 The request including the template

workflow

string required

The workflow for which to return the template.

Value enroll

module

string required

The module for which to return the template.

Value webra

profile

string | null (Certificate profile) required

The profile for which to return the template.

template

object (WebRA Enroll Request Template) required

The template with the constraint set on the profile

csr

string | null

Used to pre-fill the template field with the CSR values.

keyType

string | null (Keytype)

The type of key that will be used to generate the certificate, if in centralized mode

Enum rsa-<size> ec-secp256r1 ec-secp384r1 ec-secp521r1 ed-Ed448 ed-Ed25519

subject

array of objects | null (IndexedDNElement)

List of DN elements that will be used to build the certificate's Distinguished Name

Array [

element

string required

The element type and index. Indexes start at 1 !

Enum cn e ou st l o c dc uid serialNumber surname givenName unstructuredAddress unstructuredName organizationIdentifier uniqueIdentifier street description

type

string | null

The formatted element type

Enum CN E OU ST L O C DC UID SERIALNUMBER SURNAME GIVENNAME unstructuredAddress unstructuredName organizationIdentifier UniqueIdentifier STREET DESCRIPTION

value

string | null

The element value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

mandatory

boolean | null

Whether the field is mandatory or not

editable

boolean | null

Whether the field is editable or not for the currently authenticated user

regex

string | null

A regular expression that will be used to validate the element's value

]

sans

array of objects | null (SAN Element)

List of SAN elements that will be used to build the certificate's Subject Alternative Name

Array [

type

string | null required

SAN type

Enum RFC822NAME DNSNAME URI IPADDRESS OTHERNAME_UPN OTHERNAME_GUID

value

array of string | null

SAN value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether this SAN element is editable by the user

regex

string | null

The regex that will be used to validate the SAN value

min

integer | null

The minimum number of SAN elements that must be provided

max

integer | null

The maximum number of SAN elements that can be provided

]

extensions

array of objects | null (Certificate Extension)

Information about the certificate's extensions and how to edit them

Array [

type

string required

The type of the extension element

Enum ms_sid ms_template

value

string | null

The value of the extension element

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the extension element is editable by the requester

regex

string | null

The regular expression to validate the extension element

mandatory

boolean | null

Whether the extension element is mandatory to submit this request

]

labels

array of objects | null (Label)

List of labels used internally to tag and group certificates

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

contactEmail

object | null (Contact email)

Information about the certificate's contact email and how to edit it

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

owner

object | null (Certificate Owner)

Information about the certificate's owner and how to edit it

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

Information about the certificate's team and how to edit it

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

capabilities

object | null (Certificate profile crypto policy)

Describes how certificates will be enrolled on this profile

centralized

boolean required

Whether this profile supports centralized enrollment

decentralized

boolean required

Whether this profile supports decentralized enrollment

escrow

boolean required

Whether this profile will escrow the certificate private keys

defaultKeyType

string | null (Keytype)

Default key type used for centralized enrollment

Enum rsa-<size> ec-secp256r1 ec-secp384r1 ec-secp521r1 ed-Ed448 ed-Ed25519

authorizedKeyTypes

array of string | null (Keytype)

List of authorized key types for enrollment

preferredEnrollmentMode

string | null

If both centralized and decentralized enrollment are supported, this is the preferred mode

Enum centralized decentralized

p12passwordPolicy

string | null

Password policy for the P12 file

p12passwordMode

string | null

Whether the user will be required to input their PKCS#12 password upon enrollment

Enum random manual

p12storeEncryptionType

string | null

Encryption type for the P12 file

showP12PasswordOnEnroll

boolean | null

Whether the PKCS#12 password will be displayed to the user upon enrollment

showP12OnEnroll

boolean | null

Whether the PKCS#12 file will be displayed to the user upon enrollment

showP12PasswordOnRecover

boolean | null

Whether the PKCS#12 password will be displayed to the user upon recovery

showP12OnRecover

boolean | null

Whether the PKCS#12 file will be displayed to the user upon recovery

passwordPolicy

object | null (Password Policy)

The password policy that will be used to generate the certificate's PKCS#12 password

_id

string (Internal ID) required

The internal ID of the password policy

name

string required

The name of the password policy

minChar

integer required

The minimum number of characters of the password

maxChar

integer | null

The maximum number of characters of the password

minUpChar

integer | null

The minimum number of uppercase characters of the password

minLoChar

integer | null

The minimum number of lowercase characters of the password

minDiChar

integer | null

The minimum number of digits of the password

spChar

string | null

The special characters of the password accepted by the password policy

minSpChar

integer | null

The minimum number of special characters of the password

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

workflow

string required

The workflow for which to return the template.

Value update

profile

string | null (Certificate profile) required

The profile for which to return the template.

template

object (WebRA Update Request Template) required

The template with the constraint set on the profile

labels

array of objects | null (Label)

Information about the certificate's labels and how to edit them

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

metadata

array of objects | null (Certificate Metadata)

Information about the certificate's metadata and how to edit them

Array [

metadata

string required

Technical metadata related to the certificate

value

string | null

The value of the metadata element

editable

boolean | null

Whether the metadata element is editable by the requester

]

owner

object | null (Certificate Owner)

Information about the certificate's owner and how to edit it

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

Information about the certificate's team and how to edit it

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

contactEmail

object | null (Contact email)

Information about the certificate's contact email and how to edit it

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

workflow

string required

The workflow for which to return the template.

Value migrate

profile

string | null (Certificate profile) required

The profile for which to return the template.

template

object (models.webra.WebRAMigrateRequestTemplate) required

The template with the constraint set on the profile

labels

array of objects | null (Label)

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

owner

object | null (Certificate Owner)

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

metadata

array of objects | null (Certificate Metadata)

Array [

metadata

string required

Technical metadata related to the certificate

value

string | null

The value of the metadata element

editable

boolean | null

Whether the metadata element is editable by the requester

]

contactEmail

object | null (Contact email)

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

workflow

string required

The workflow for which to return the template.

Value renew

template

object (WebRA Renew Request Template) required

The cryptography policy applied during the recovery of a certificate

capabilities

object | null (Certificate profile crypto policy)

Describes how certificates will be enrolled on this profile

centralized

boolean required

Whether this profile supports centralized enrollment

decentralized

boolean required

Whether this profile supports decentralized enrollment

escrow

boolean required

Whether this profile will escrow the certificate private keys

defaultKeyType

string | null (Keytype)

Default key type used for centralized enrollment

Enum rsa-<size> ec-secp256r1 ec-secp384r1 ec-secp521r1 ed-Ed448 ed-Ed25519

authorizedKeyTypes

array of string | null (Keytype)

List of authorized key types for enrollment

preferredEnrollmentMode

string | null

If both centralized and decentralized enrollment are supported, this is the preferred mode

Enum centralized decentralized

p12passwordPolicy

string | null

Password policy for the P12 file

p12passwordMode

string | null

Whether the user will be required to input their PKCS#12 password upon enrollment

Enum random manual

p12storeEncryptionType

string | null

Encryption type for the P12 file

showP12PasswordOnEnroll

boolean | null

Whether the PKCS#12 password will be displayed to the user upon enrollment

showP12OnEnroll

boolean | null

Whether the PKCS#12 file will be displayed to the user upon enrollment

showP12PasswordOnRecover

boolean | null

Whether the PKCS#12 password will be displayed to the user upon recovery

showP12OnRecover

boolean | null

Whether the PKCS#12 file will be displayed to the user upon recovery

passwordPolicy

object | null (Password Policy)

The password policy that will be used to generate the certificate's PKCS#12 password

_id

string (Internal ID) required

The internal ID of the password policy

name

string required

The name of the password policy

minChar

integer required

The minimum number of characters of the password

maxChar

integer | null

The maximum number of characters of the password

minUpChar

integer | null

The minimum number of uppercase characters of the password

minLoChar

integer | null

The minimum number of lowercase characters of the password

minDiChar

integer | null

The minimum number of digits of the password

spChar

string | null

The special characters of the password accepted by the password policy

minSpChar

integer | null

The minimum number of special characters of the password

profile

string (Certificate profile) required

The profile for which to return the template.

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

workflow

string required

The workflow for which to return the template.

Value import

template

object (WebRA Import Request Template) required

privateKey

string | null

The PEM-encoded private key associated with the certificate. Mandatory if target profile has escrow enabled, forbidden otherwise

owner

object | null (Certificate Owner)

The owner for this certificate

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

The team for this certificate

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

contactEmail

object | null (Contact email)

The contact email for this certificate

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

labels

array of objects | null (Label)

The labels for this certificate

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

metadata

array of objects | null (Certificate Metadata)

The technical metadata for this certificate

Array [

metadata

string required

Technical metadata related to the certificate

value

string | null

The value of the metadata element

editable

boolean | null

Whether the metadata element is editable by the requester

]

thirdPartyData

array of objects | null (models.thirdparty.ThirdPartyItem)

The third party data associated with the certificate

Array [

connector

string required

The third party connector name on which this certificate is synchronized

string required

The Id of this certificate on the third party

fingerprint

string | null

The fingerprint of this certificate on the third party

pushDate

integer | null

The date when the certificate was pushed to this third party

removeDate

integer | null

The date when the certificate was removed from this third party (in case of revocation)

]

discoveryInfo

object | null (models.discovery.DiscoveryInfo)

Information about the discovery of this certificate

campaign

string required

The discovery campaign's name

lastDiscoveryDate

integer required

When this certificate was discovered for the last time

identifier

string | null

Identifier of the user that discovered this certificate

discoveryData

object (models.discovery.HostDiscoveryData)

The host discovery data associated with the certificate (discovery metadata)

string | null

The certificate's host ip

sources

array of string | null

Information on the type of discovery that discovered this certificate

hostnames

array of string | null

The certificate's host hostnames (netscan only)

operatingSystems

array of string | null

The certificate's host operating system (localscan only)

paths

array of string | null

The path to the certificate on the host machine (localscan only)

usages

array of string | null

The path of the configuration files that were used to find the certificates

tlsPorts

array of objects | null (models.discovery.TlsPort)

The ports on which the certificate is exposed for https connexion

profile

string (Certificate profile) required

The profile for which to return the template.

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

workflow

string required

The workflow for which to return the template.

Value enroll

module

string required

The module for which to return the template.

Value est

template

object (EST Enroll Request Template) required

The template with the constraint set on the profile

subject

array of objects | null (IndexedDNElement)

List of DN elements that will be used to build the certificate's Distinguished Name

Array [

element

string required

The element type and index. Indexes start at 1 !

Enum cn e ou st l o c dc uid serialNumber surname givenName unstructuredAddress unstructuredName organizationIdentifier uniqueIdentifier street description

type

string | null

The formatted element type

Enum CN E OU ST L O C DC UID SERIALNUMBER SURNAME GIVENNAME unstructuredAddress unstructuredName organizationIdentifier UniqueIdentifier STREET DESCRIPTION

value

string | null

The element value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

mandatory

boolean | null

Whether the field is mandatory or not

editable

boolean | null

Whether the field is editable or not for the currently authenticated user

regex

string | null

A regular expression that will be used to validate the element's value

]

sans

array of objects | null (SAN Element)

List of SAN elements that will be used to build the certificate's Subject Alternative Name

Array [

type

string | null required

SAN type

Enum RFC822NAME DNSNAME URI IPADDRESS OTHERNAME_UPN OTHERNAME_GUID

value

array of string | null

SAN value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether this SAN element is editable by the user

regex

string | null

The regex that will be used to validate the SAN value

min

integer | null

The minimum number of SAN elements that must be provided

max

integer | null

The maximum number of SAN elements that can be provided

]

extensions

array of objects | null (Certificate Extension)

Information about the certificate's extensions and how to edit them

Array [

type

string required

The type of the extension element

Enum ms_sid ms_template

value

string | null

The value of the extension element

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the extension element is editable by the requester

regex

string | null

The regular expression to validate the extension element

mandatory

boolean | null

Whether the extension element is mandatory to submit this request

]

labels

array of objects | null (Label)

List of labels used internally to tag and group certificates

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

contactEmail

object | null (Contact email)

Information about the certificate's contact email and how to edit it

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

owner

object | null (Certificate Owner)

Information about the certificate's owner and how to edit it

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

Information about the certificate's team and how to edit it

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

dnWhitelist

boolean | null

DN whitelist is enabled on this request

profile

string (Certificate profile) required

The profile for which to return the template.

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

workflow

string required

The workflow for which to return the template.

Value enroll

module

string required

The module for which to return the template.

Enum scep jamf

template

object (SCEP Enroll Request Template) required

The template with the constraint set on the profile

subject

array of objects | null (IndexedDNElement)

List of DN elements that will be used to build the certificate's Distinguished Name

Array [

element

string required

The element type and index. Indexes start at 1 !

Enum cn e ou st l o c dc uid serialNumber surname givenName unstructuredAddress unstructuredName organizationIdentifier uniqueIdentifier street description

type

string | null

The formatted element type

Enum CN E OU ST L O C DC UID SERIALNUMBER SURNAME GIVENNAME unstructuredAddress unstructuredName organizationIdentifier UniqueIdentifier STREET DESCRIPTION

value

string | null

The element value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

mandatory

boolean | null

Whether the field is mandatory or not

editable

boolean | null

Whether the field is editable or not for the currently authenticated user

regex

string | null

A regular expression that will be used to validate the element's value

]

sans

array of objects | null (SAN Element)

List of SAN elements that will be used to build the certificate's Subject Alternative Name

Array [

type

string | null required

SAN type

Enum RFC822NAME DNSNAME URI IPADDRESS OTHERNAME_UPN OTHERNAME_GUID

value

array of string | null

SAN value

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether this SAN element is editable by the user

regex

string | null

The regex that will be used to validate the SAN value

min

integer | null

The minimum number of SAN elements that must be provided

max

integer | null

The maximum number of SAN elements that can be provided

]

extensions

array of objects | null (Certificate Extension)

Information about the certificate's extensions and how to edit them

Array [

type

string required

The type of the extension element

Enum ms_sid ms_template

value

string | null

The value of the extension element

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the extension element is editable by the requester

regex

string | null

The regular expression to validate the extension element

mandatory

boolean | null

Whether the extension element is mandatory to submit this request

]

labels

array of objects | null (Label)

List of labels used internally to tag and group certificates

Array [

label

string required

The name of the label

displayName

array of objects | null (LocalizedString)

The display name of the label element

description

array of objects | null (LocalizedString)

The description of the label element

value

string | null

The value of the label element

computationRule

string | null (Computation Rule)

The computation rule of the label element

mandatory

boolean | null

Whether the label element is mandatory to submit this request

editable

boolean | null

Whether the label element is editable

regex

string | null

The regex used to validate the label element

enum

array of string | null

The enum used to validate the label element

suggestions

array of string | null

The suggestions used to recommend the label element values

]

contactEmail

object | null (Contact email)

Information about the certificate's contact email and how to edit it

value

string | null

The contact email

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the contact email is editable by the requester

mandatory

boolean | null

Whether the contact email is mandatory to submit this request

regex

string | null

The regular expression to validate the contact email

whitelist

array of string | null

The list of allowed contact emails

description

array of objects | null (LocalizedString)

The description of the contact email

owner

object | null (Certificate Owner)

Information about the certificate's owner and how to edit it

value

string | null

The value of the owner element. This should be a principal identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

editable

boolean | null

Whether the owner element is editable by the requester

mandatory

boolean | null

Whether the owner element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the owner element

team

object | null (Certificate Team)

Information about the certificate's team and how to edit it

value

string | null

The value of the team element. This should be a team identifier

computationRule

string | null (Computation Rule)

Computation rule input will be evaluated and will override all other inputs

authorized

array of string | null

The list of authorized teams

editable

boolean | null

Whether the team element is editable by the requester

mandatory

boolean | null

Whether the team element is mandatory to submit this request

description

array of objects | null (LocalizedString)

The description of the team element

dnWhitelist

boolean | null

DN whitelist is enabled on this request

profile

string (Certificate profile) required

The profile for which to return the template.

certificateId

string | null (Horizon certificate ID)

Used to pre-fill the template field with the certificate values.

certificatePem

string | null (Certificate pem)

Used to pre-fill the template field with the certificate values.

400 Invalid request

401 Unauthorized request

403 Forbidden action

404 No profile specified

500 Internal server error

post

/api/v1/requests/template

{

"workflow": "enroll" ,

"module": "webra" ,

"profile": "webra_centralized" ,

"template":

{ ... }

}

{

"workflow": "enroll" ,

"module": "webra" ,

"profile": "webra_centralized" ,

"template":

{ ... }

}