---
title: "POST /v1/{+name}:approve"
method: POST
path: "/v1/{+name}:approve"
tags: ["projects"]
---

# POST /v1/{+name}:approve

`POST /v1/{+name}:approve`

Approves a SingleTenantHsmInstanceProposal for a given SingleTenantHsmInstance. The proposal must be in the PENDING state.

## Path parameters

- `name` string, required

## Request body

- ApproveSingleTenantHsmInstanceProposalRequest — Request message for HsmManagement.ApproveSingleTenantHsmInstanceProposal.
  - `quorumReply` QuorumReply — The reply to QuorumParameters for approving the proposal.
    - `challengeReplies` ChallengeReply[] — Required. The challenge replies to approve the proposal. Challenge replies can be sent across multiple requests. The proposal will be approved when required_approver_count challenge replies are provided.
      - `signedChallenge` string, byte — Required. The signed challenge associated with the 2FA key. The signature must be RSASSA-PKCS1 v1.5 with a SHA256 digest.
      - `publicKeyPem` string — Required. The public key associated with the 2FA key.
  - `requiredActionQuorumReply` RequiredActionQuorumReply — The reply to RequiredActionQuorumParameters for approving the proposal.
    - `requiredChallengeReplies` ChallengeReply[] — Required. All required challenges must be signed for the proposal to be approved. These can be sent across multiple requests.
      - `signedChallenge` string, byte — Required. The signed challenge associated with the 2FA key. The signature must be RSASSA-PKCS1 v1.5 with a SHA256 digest.
      - `publicKeyPem` string — Required. The public key associated with the 2FA key.
    - `quorumChallengeReplies` ChallengeReply[] — Required. Quorum members' signed challenge replies. These can be provided across multiple requests. The proposal will be approved when required_approver_count quorum_challenge_replies are provided and when all required_challenge_replies are provided.
      - `signedChallenge` string, byte — Required. The signed challenge associated with the 2FA key. The signature must be RSASSA-PKCS1 v1.5 with a SHA256 digest.
      - `publicKeyPem` string — Required. The public key associated with the 2FA key.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/cloudkms.md) · [All operations](https://skmtc.net/google/apis/cloudkms/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/cloudkms/versions/576b283e53dd/schema)