---
title: "Sets the primary or secondary x509 certificate of an enrollment group"
method: PUT
path: "/enrollmentGroups/{enrollmentGroupId}/certificates/{entry}"
---

# Sets the primary or secondary x509 certificate of an enrollment group

`PUT /enrollmentGroups/{enrollmentGroupId}/certificates/{entry}`

Sets the primary or secondary x509 certificate of an enrollment group.

## Path parameters

- `enrollmentGroupId` string, required
- `entry` 'primary' | 'secondary', required

## Query parameters

- `api-version` string, required

## Request body

- SigningX509Certificate — The X509 certificate definition.
  - `verified` boolean — Whether the certificate has been verified.
  - `certificate` string — The string representation of this certificate.
  - `info` X509CertificateInfo — The X509 certificate info.
    - `sha1Thumbprint` string, required — The SHA-1 hash value of the certificate.
  - `etag` string — ETag used to prevent conflict across multiple updates

## Response `200`

Success

- SigningX509Certificate — The X509 certificate definition.
  - `verified` boolean — Whether the certificate has been verified.
  - `certificate` string — The string representation of this certificate.
  - `info` X509CertificateInfo — The X509 certificate info.
    - `sha1Thumbprint` string, required — The SHA-1 hash value of the certificate.
  - `etag` string — ETag used to prevent conflict across multiple updates

## Other responses

- `default` — An error response received from the IoT Central Service.

---

[API](https://skmtc.net/azure/apis/iotcentral-iotcentral.md) · [All operations](https://skmtc.net/azure/apis/iotcentral-iotcentral/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/azure/iotcentral-iotcentral/versions/565d8813cbd3/schema)