---
title: "PATCH /api/v1/cert-manager/ca/acme/{id}"
method: PATCH
path: "/api/v1/cert-manager/ca/acme/{id}"
tags: ["PKI Certificate Authorities"]
---

# PATCH /api/v1/cert-manager/ca/acme/{id}

`PATCH /api/v1/cert-manager/ca/acme/{id}`

## Path parameters

- `id` string, required

## Request body

- object
  - `name` string — The updated name of the ACME-compatible CA Certificate Authority. Must be slug-friendly.
  - `status` 'active' | 'disabled' | 'pending-certificate' — The updated status of the ACME-compatible CA Certificate Authority.
  - `configuration` object
    - `dnsAppConnectionId` string, uuid, required — The ID of the App Connection to use for creating and managing DNS TXT records required for ACME domain validation. This connection must have permissions to create and delete TXT records in your DNS provider (e.g., Route53) for the ACME challenge process.
    - `dnsProviderConfig` object, required
      - `provider` 'route53' | 'cloudflare' | 'dns-made-easy' | 'azure-dns', required — The DNS provider for the ACME Certificate Authority.
      - `hostedZoneId` string, required — The hosted zone ID for the ACME Certificate Authority.
    - `directoryUrl` string, uri, required — The directory URL for the ACME Certificate Authority.
    - `accountEmail` string, required — The email address for the ACME Certificate Authority.
    - `eabKid` string — The External Account Binding (EAB) Key ID for the ACME Certificate Authority. Required if the ACME provider uses EAB.
    - `eabHmacKey` string — The External Account Binding (EAB) HMAC key for the ACME Certificate Authority. Required if the ACME provider uses EAB.
    - `dnsResolver` union — An optional custom DNS resolver IP address to use for verifying DNS propagation during ACME challenges. Must be a valid IP address (e.g. 8.8.8.8). When not set, the system default DNS resolver is used.
      - string, ipv4
      - string, ipv6

## Response `200`

Default Response

- object
  - `enableDirectIssuance` boolean
  - `name` string, required
  - `id` string, uuid, required
  - `status` 'active' | 'disabled' | 'pending-certificate', required
  - `type` 'acme', required
  - `configuration` object, required
    - `dnsAppConnectionId` string, uuid, required — The ID of the App Connection to use for creating and managing DNS TXT records required for ACME domain validation. This connection must have permissions to create and delete TXT records in your DNS provider (e.g., Route53) for the ACME challenge process.
    - `dnsProviderConfig` object, required
      - `provider` 'route53' | 'cloudflare' | 'dns-made-easy' | 'azure-dns', required — The DNS provider for the ACME Certificate Authority.
      - `hostedZoneId` string, required — The hosted zone ID for the ACME Certificate Authority.
    - `directoryUrl` string, uri, required — The directory URL for the ACME Certificate Authority.
    - `accountEmail` string, required — The email address for the ACME Certificate Authority.
    - `eabKid` string — The External Account Binding (EAB) Key ID for the ACME Certificate Authority. Required if the ACME provider uses EAB.
    - `dnsResolver` union — An optional custom DNS resolver IP address to use for verifying DNS propagation during ACME challenges. Must be a valid IP address (e.g. 8.8.8.8). When not set, the system default DNS resolver is used.
      - string, ipv4
      - string, ipv6

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/infisical/apis/infisical-api.md) · [All operations](https://skmtc.net/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/infisical/infisical-api/versions/f10a4f8c1d41/schema)