Skip to main content
ZStack
Recently Deleted/Recently Deleted

IssueEnrollmentCertificate

Submit a locally generated opamp_control CSR using the EnrollmentSession authorization scheme. An identical CSR returns the original certificate; no Agent record is created by this request.

POST/api/v1/lifecycle/managed-agent/enrollments/{id}/certificates

Operation ID

IssueEnrollmentCertificate

Since

1.3.0

Execution Mode

Synchronous

Auth Context

Auth Required

Auth Context

Send these values as request headers when calling this API.

AuthorizationstringRequired

Bearer Token

X-Tenant-IDstring

X-Tenant-ID

Request Inputs

application/json

Path Parameters

  • id
    StringRequired

    EnrollmentAttempt ID from the StartEnrollment response.

Body Fields

  • requestId
    String

    Request id for this resource

    Example: value

  • purpose
    String

    Only opamp_control is supported.

    Example: value

  • csrPem
    String

    Local CSR only; never send or accept a private key.

    Example: value

Responses

200 OK
200 OK

On success, this API returns the following response structure.

  • certificateId
    String

    Certificate id for this resource

    Example: value

  • agentId
    String

    Agent id for this resource

    Example: value

  • purpose
    String

    Purpose for this resource

    Example: value

  • certificatePem
    String

    Certificate pem for this resource

    Example: value

  • notAfter
    String

    Not after for this resource

    Example: 2026-01-15T08:00:00Z

  • opampEndpoint
    Object

    Opamp endpoint for this resource

    • url
      String

      HTTPS endpoint with path /v1/opamp that the enrolled Agent uses for authenticated management communication.

      Example: https://example.com/v1/opamp

    • serverName
      String

      Server name for this resource

      Example: value