---
title: "Extend the life of a currently enrolled router's certificates"
method: POST
path: "/enroll/extend/router"
tags: ["Enroll", "Extend Enrollment"]
---

# Extend the life of a currently enrolled router's certificates

`POST /enroll/extend/router`

Allows a router to extend its certificates' expiration date by
using its current and valid client certificate to submit a CSR. This CSR may
be passed in using a new private key, thus allowing private key rotation or swapping.

After completion any new connections must be made with certificates returned from a 200 OK
response. The previous client certificate is rendered invalid for use with the controller even if it
has not expired.

This request must be made using the existing, valid, client certificate.

## Request body

- RouterExtendEnrollmentRequest
  - `certCsr` string, required
  - `serverCertCsr` string, required

## Response `200`

A response containing the edge routers new signed certificates (server chain, server cert, CAs).

- EnrollmentCertsEnvelope
  - `data` EnrollmentCerts
    - `ca` string — A PEM encoded set of CA certificates to trust
    - `cert` string — A PEM encoded set of certificates to use as the client chain
    - `serverCert` string — A PEM encoded set of certificates to use as the servers chain
  - `meta` Meta
    - `apiEnrollmentVersion` string
    - `apiVersion` string
    - `filterableFields` string[]
    - `pagination` Pagination
      - `limit` number, required
      - `offset` number, required
      - `totalCount` number, required

## Other responses

- `400` — The supplied request contains invalid fields or could not be parsed (json and non-json bodies). The error's code, message, and cause fields can be inspected for further information
- `401` — The supplied session does not have the correct access rights to request this resource
- `429` — The resource requested is rate limited and the rate limit has been exceeded

---

[API](https://skmtc.net/openziti/apis/ziti-edge-client.md) · [All operations](https://skmtc.net/openziti/apis/ziti-edge-client/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openziti/ziti-edge-client/versions/25da9a73a095/schema)