Current API Session
Enroll
Extend Enrollment
Allows the current identity to recieve a new certificate associated with a certificate based authenticator
This endpoint only functions for certificates issued by the controller. 3rd party certificates are not handled. Allows an identity to extend its certificate's expiration date by using its current and valid client certificate to submit a CSR. This CSR may be passed in using a new private key, thus allowing private key rotation. The response from this endpoint is a new client certificate which the client must be verified via the /authenticators/{id}/extend-verify endpoint. After verification is completion any new connections must be made with new certificate. Prior to verification the old client certificate remains active.
post/current-identity/authenticators/{id}/extend
Path parameters
idstring required
The id of the requested resource
Request body
Response
A response containg the identity's new certificate
Example response
{
"data": {
"clientCert": "clientCert",
"ca": "ca"
},
"meta": {
"apiEnrollmentVersion": "apiEnrollmentVersion",
"apiVersion": "apiVersion",
"pagination": {
"offset": 6.027456183070403,
"limit": 0.8008281904610115,
"totalCount": 1.4658129805029452
},
"filterableFields": [
"filterableFields",
"filterableFields"
]
}
}