---
title: "POST /certificate/register"
method: POST
path: "/certificate/register"
---

# POST /certificate/register

`POST /certificate/register`

Registers a device certificate with IoT in the same [certificate mode](https://docs.aws.amazon.com/iot/latest/apireference/API_CertificateDescription.html#iot-Type-CertificateDescription-certificateMode) as the signing CA. If you have more than one CA certificate that has the same subject field, you must specify the CA certificate that was used to sign the device certificate being registered.

Requires permission to access the [RegisterCertificate](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action.

## Query parameters

- `setAsActive` boolean

## Request body

- object
  - `certificatePem` string, required — The PEM of a certificate.
  - `caCertificatePem` string — The PEM of a certificate.
  - `status` 'ACTIVE' | 'INACTIVE' | 'REVOKED' | 'PENDING_TRANSFER' | 'REGISTER_INACTIVE' | 'PENDING_ACTIVATION' — The status of the register certificate request. Valid values that you can use include <code>ACTIVE</code>, <code>INACTIVE</code>, and <code>REVOKED</code>.

## Response `200`

Success

- RegisterCertificateResponse — The output from the RegisterCertificate operation.
  - `certificateArn` string — The certificate ARN.
  - `certificateId` string — The certificate identifier.

## Other responses

- `480` — ResourceAlreadyExistsException
- `481` — InvalidRequestException
- `482` — CertificateValidationException
- `483` — CertificateStateException
- `484` — CertificateConflictException
- `485` — ThrottlingException
- `486` — UnauthorizedException
- `487` — ServiceUnavailableException
- `488` — InternalFailureException

---

[API](https://skmtc.net/aws/apis/iot.md) · [All operations](https://skmtc.net/aws/apis/iot/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/iot/revisions/deef5c4b09f0/schema)