---
title: "PATCH /api/v1/pki/ca/{caId}"
method: PATCH
path: "/api/v1/pki/ca/{caId}"
tags: ["PKI Certificate Authorities"]
---

# PATCH /api/v1/pki/ca/{caId}

`PATCH /api/v1/pki/ca/{caId}`

Update CA

## Path parameters

- `caId` string, required

## Request body

- object
  - `status` 'active' | 'disabled' — The status of the CA to update to. This can be one of active or disabled.
  - `requireTemplateForIssuance` boolean — Whether or not certificates for this CA can only be issued through certificate templates.

## Response `200`

Default Response

- object
  - `ca` object, required
    - `id` string, uuid, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `projectId` string, required
    - `status` string, required
    - `enableDirectIssuance` boolean
    - `name` string, required
    - `parentCaId` string, uuid, nullable
    - `type` string, required
    - `friendlyName` string, required
    - `organization` string, required
    - `ou` string, required
    - `country` string, required
    - `province` string, required
    - `locality` string, required
    - `commonName` string, required
    - `dn` string, required
    - `serialNumber` string, nullable
    - `maxPathLength` number, nullable
    - `keyAlgorithm` string, required
    - `activeCaCertId` string, uuid, nullable
    - `crlDistributionPointUrls` string[], nullable
    - `disableManagedCrlDistributionPointUrl` boolean
    - `requireTemplateForIssuance` boolean
    - `notAfter` string
    - `notBefore` string

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/885aef3e6c11/schema)