Upload certificate

akamai_cloudcertificates_upload_signed_certificate

📘
Beta
Hello. Just a note to let you know the underlying API on which this resource is built is general release and has been vetted, but because this is a new feature for our Terraform provider, we've given it beta label.
This status just means we've paused for a bit to get your feedback to make sure this data source works like you need and expect.

Upload a signed third-party certificate and any other files the certificate authority (CA) sent you.

The certificate and trust chain the CA gives you need to be in PEM format before you can use it in Cloud Certificate Manager (CCM). A PEM certificate is a Base64-encoded ASCII file and contains ----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- statements.

If the CA provides you with a certificate that isn't in PEM format, you can convert it to PEM format using an SSL converter.

resource "akamai_cloudcertificates_upload_signed_certificate" "example-upload" {
  certificate_id         = "12345"
  signed_certificate_pem = <<-EOT
      -----BEGIN CERTIFICATE-----
      MIID <sample - removed for readability> .... Mweq
      -----END CERTIFICATE-----
  EOT
  trust_chain_pem        = <<-EOT
      -----BEGIN CERTIFICATE-----
      MIID <sample - removed for readability> .... Mweq
      -----END CERTIFICATE-----
  EOT
  acknowledge_warnings   = true
}

data "local_file" "cert" {
  filename = "example_signed_certificate.pem"
}

data "local_file" "chain" {
  filename = "example_trust_chain.pem"
}

resource "akamai_cloudcertificates_upload_signed_certificate" "example-upload" {
  depends_on = [
    akamai_cloudcertificates_certificate.my-third-party-cert
  ]
  certificate_id         = "12345"
  acknowledge_warnings   = true
  signed_certificate_pem = data.local_file.cert.content
  trust_chain_pem        = data.local_file.chain.content
}

signed-cert = {
  acknowledge_warnings                     = true
  certificate_id                           = "12345"
  certificate_status                       = "READY_FOR_USE"
  modified_by                              = "jsmith"
  modified_date                            = "2025-11-03T11:04:58.349419Z"
  signed_certificate_issuer                = "CN=example.com CA,O=Main Street Corporation,C=US"
  signed_certificate_not_valid_after_date  = "2028-02-03T11:00:43Z"
  signed_certificate_not_valid_before_date = "2025-11-03T11:00:43Z"
  signed_certificate_pem                   = <<-EOT
    -----BEGIN CERTIFICATE-----
    MIID <sample - removed for readability> .... Mweq
    -----END CERTIFICATE-----
  EOT
  signed_certificate_serial_number         = "a1:23:4b:56:78:9c:0d:12:e3:45:67:89:f0:1g:hi:jk"
  signed_certificate_sha256_fingerprint    = "A1:23:4B:5C:67:89:00:12:3D:45:F6:G7:89:HI:J0:K1:L2:M3:45:67:NO"
  trust_chain_pem                          = <<-EOT
    -----BEGIN CERTIFICATE-----
    MIID <sample - removed for readability> .... Mweq
    -----END CERTIFICATE-----
  EOT
}

Arguments

Send all the required arguments to upload a signed third-party certificate.

Argument	Required	Description
`certificate_id`	✔	Your certificate's ID.
`signed_certificate_pem`	✔	The PEM-encoded signed certificate to upload.
`trust_chain_pem`		The PEM-encoded trust chain linked to the signed certificate.
`acknowledge_warnings`		When `true`, it automatically acknowledges all warnings. Defaults to `false` if not set.

Attributes

There's no standard output for this resource as changes are reflected in your state file and based on what you passed in the resource block body.

Attribute	Description
`modified_date`	The timestamp indicating when the certificate was modified.
`modified_by`	The user who modified the certificate.
`certificate_status`	The certificate's status. Possible values are: `CSR_READY`. The CSR generation is complete and available for download. `READY_FOR_USE`. The signed certificate, with or without its trust chain, has been accepted and is now ready for use. `ACTIVE`. The certificate is bound to a property hostname and is being used on one or more networks.
`signed_certificate_not_valid_after_date`	The timestamp indicating when the signed certificate expires.
`signed_certificate_not_valid_before_date`	The timestamp indicating when the signed certificate becomes valid.
`signed_certificate_serial_number`	The signed certificate's serial number in hex format.
`signed_certificate_sha256_fingerprint`	The signed certificate's SHA-256 fingerprint.
`signed_certificate_issuer`	The signed certificate's issuer field.

Updated 2 months ago

📘Beta

Arguments

Attributes

📘
Beta