v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-142381,278956.3 KB

Creates a 2048-bit RSA key pair and issues an X.509 certificate using the issued public key. You can also call CreateKeysAndCertificate over MQTT from a device, for more information, see Provisioning MQTT API.

Note This is the only time IoT issues the private key for this certificate, so it is important to keep it in a secure location.

Requires permission to access the CreateKeysAndCertificate action.

post/keys-and-certificate

Query parameters

setAsActiveboolean

Specifies whether the certificate is active.

Response

Success

certificateArnstring

The ARN of the certificate.

certificateIdstring

The ID of the certificate. IoT issues a default subject name for the certificate (for example, IoT Certificate).

certificatePemstring

The certificate data, in PEM format.