HTTP Requests for Certificate Management

You can use HTTP requests to generate a CSR, retrieve, renew, or replace TLS certificates, and retrieve, create, or delete trusted root certificate chains.

HTTP Requests

The following HTTP requests show the syntax that you can use to perform the available user operations.
Before you send requests, you must authenticate with administrator credentials.
  • Generate a CSR
    POST https://<
    server
    >/rest/vcenter/certificate-management/vcenter/tls-csr
  • Get TLS certificates
    GET https://<
    server
    >/rest/vcenter/certificate-management/vcenter/tls
  • Replace TLS certificates
    PUT https://<
    server
    >/rest/vcenter/certificate-management/vcenter/tls
  • Renew TLS certificates
    POST https://<
    server
    >/rest/vcenter/certificate-management/vcenter/tls?action=renew
  • Create a trusted root certificate chain
    POST https://<
    server
    >/rest/vcenter/certificate-management/vcenter/trusted-root-chains
  • List trusted root certificates
    GET https://<
    server
    >/rest/vcenter/certificate-management/vcenter/trusted-root-chains
  • Get trusted root certificate information
    GET https://<
    server
    >/rest/vcenter/certificate-management/vcenter/trusted-root-chains/{chain}
  • Delete a trusted root certificate
    DELETE https://<
    server
    >/rest/vcenter/certificate-management/vcenter/trusted-root-chains/{chain}
For information about the content and syntax of the HTTP request body, see the
API Reference
documentation.

HTTP Status Codes

Table 1 lists the status codes that you can receive when you send HTTP requests.
HTTP Status Codes
HTTP Status Code
Description
Operations that Return the Status Code
200
The operation is successful.
All operations. You can check the returned data in the results data structure.
400
The operation is unsuccessful.
  • Generate a CSR
  • Get TLS certificates
  • Replace TLS certificates
  • Renew TLS certificates
  • Create a trusted root certificate chain
403
There is an authorization issue.
  • Create a trusted root certificate chain
  • List trusted root certificates
  • Get trusted root certificate information
  • Delete a trusted root certificate
404
The object you are trying to perform an operation on is missing.
  • Get TLS certificates
  • Replace TLS certificates
  • Get trusted root certificate information
  • Delete a trusted root certificate