API
Start typing to search…

Create a client certificate

post https://{hostname}/mtls-origin-keystore/v1/client-certificates

Create a client certificate with the provided name.

Query Params
string

For customers who manage more than one account, this runs the operation from another account. The Identity and Access Management API provides a list of available account switch keys.

Body Params
string
required
length between 1 and 64

The name of the client certificate.

string
required
length ≥ 1

The contract assigned to the client certificate.

string
required

Specifies the type of network to deploy the client certificate. Either CORE, RUSSIA_AND_CORE, or CHINA_AND_CORE. Use CORE to deploy across most of the world except for licensed areas. Use RUSSIA_AND_CORE to include Russia, or CHINA_AND_CORE to include China. Based on Chinese and Russian government approval, enable non-core deployments on your contract.

integer
required
≥ 0

The group assigned to the client certificate.

string | null

The cryptographic algorithm used for key generation, either RSA or ECDSA.

notificationEmails
array of strings
required
length ≥ 1

The email addresses to notify for client certificate related issues.

notificationEmails*
string | null

The common name of the account CA certificate selected to sign the client certificate. Specify null if you want to add this later.

string
required

Identifies the network deployment type. Either STANDARD_TLS or ENHANCED_TLS. A value of ENHANCED_TLS means Akamai's more secure network with PCI compliance capability, while STANDARD_TLS means Akamai's standard secure network.

string
required

The signing entity of the client certificate. Either AKAMAI or THIRD_PARTY. A value of AKAMAI means Akamai is the signer, while THIRD_PARTY means the third-party issuer is the signer.

string | null

Specifies the client certificate. The CN attribute is needed and can't exceed 64 characters. When null, the subject is constructed with this format: /C=US/O=Akamai Technologies, Inc./OU={vcdId} {contractId} {groupId}/CN={certificateName}/.

Responses

Response body
object
integer
required
≥ 0

The unique identifier of the client certificate.

string
required
length between 1 and 64

The name of the client certificate.

string
required
length ≥ 1

Read-only The user who created the client certificate.

date-time
required

Read-only An ISO 8601 timestamp indicating the client certificate's creation.

string
required

Specifies the type of network to deploy the client certificate. Either CORE, RUSSIA_AND_CORE, or CHINA_AND_CORE. Use CORE to deploy across most of the world except for licensed areas. Use RUSSIA_AND_CORE to include Russia, or CHINA_AND_CORE to include China. Based on Chinese and Russian government approval, enable non-core deployments on your contract.

CORE RUSSIA_AND_CORE CHINA_AND_CORE

string
required

The cryptographic algorithm used for key generation, either RSA or ECDSA.

RSA ECDSA

notificationEmails
array of strings
required
length ≥ 1

The email addresses to notify for client certificate related issues.

notificationEmails*
string
required

Identifies the network deployment type. Either STANDARD_TLS or ENHANCED_TLS. A value of ENHANCED_TLS means Akamai's more secure network with PCI compliance capability, while STANDARD_TLS means Akamai's standard secure network.

STANDARD_TLS ENHANCED_TLS

string
required

The signing entity of the client certificate. Either AKAMAI or THIRD_PARTY. A value of AKAMAI means Akamai is the signer, while THIRD_PARTY means the third-party issuer is the signer.

AKAMAI THIRD_PARTY

string
required

Specifies the client certificate. The CN attribute is required and is included in the subject, formatted as /C=US/O=Akamai Technologies, Inc./OU={vcdId} {contractId} {groupId}/CN={certificateName}/.

Headers
object
string

Hypermedia link to the newly created certificate.

integer

Indicates how many total requests you are allowed to make in the current time window. You can't make more requests than this value. See Rate Limiting.

string

Indicates the time when you can make the next request after exhausting the allowed limit in the current time period. See Rate Limiting.

integer

Indicates how many remaining requests you can make in the current time window. See Rate Limiting.

Content-Type header.

Updated 9 months ago

Did this page help you?
Language
Authentication
Remember to add your authentication credentials to run this code.
URL

Updated 9 months ago

Did this page help you?